openerp-india team mailing list archive

["Amit Parik \(OpenERP\)" <amp@xxxxxxxxxxx>]

** Changed in: openobject-addons
   Importance: Undecided => Medium

** Changed in: openobject-addons
       Status: New => Confirmed

** Changed in: openobject-addons
     Assignee: (unassigned) => OpenERP R&D Addons Team 3 (openerp-dev-addons3)

-- 
You received this bug notification because you are a member of OpenERP
Indian Team, which is subscribed to OpenERP Addons.
https://bugs.launchpad.net/bugs/1069879

Title:
  hr_expense: an employee is able to delete an approved expense

Status in OpenERP Addons (modules):
  Confirmed

Bug description:
  It is also possible after the approval of an expense:
  - to modify its currency, or
  - to reattribute it to another employee (afterwards, a rollback is no more possible)

  Steps to reproduce on an empty database:
  - create a user X and the corresponding employee
  - with X's credentials, create an expense and submit it
  - with admin's credentials, approve the expense
  - X is now able to delete the expense, or alter some of its fields like currency or employee

To manage notifications about this bug go to:
https://bugs.launchpad.net/openobject-addons/+bug/1069879/+subscriptions