summaryrefslogtreecommitdiff
path: root/addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js
diff options
context:
space:
mode:
authorYannick Tivisse <yti@odoo.com>2016-08-18 10:25:18 +0200
committerYannick Tivisse <yti@odoo.com>2016-08-25 14:55:08 +0200
commit920b791ac5751fe5c4c71403b616d9c33b5f19d9 (patch)
tree502e607af53362a21c17eef8d9abae74aa5d3018 /addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js
parent1bf327d9854044f285ef6c95bd13e980ad7e5f97 (diff)
[FIX] hr_employee: Don't create expenses from every email address
This is simply useless and the open door to spam. The inital goal for this option was to be able to create an expense from any email in the onboarding. It was even commented with 'Don't use this in production' which is another point to remove it. It is wrong because: - In a saas instance, the employee email = the admin email = the email you entered while filling the form. So, if the user sends an email with his phone, the expense will be created. If the user sends an email with another email address then the expense won't be created but he'll receive an automated email explaining that he should register his email address either on it's user information or on it's employee information (professional on employee, private on user for example). - With this modified behavior, if no email address is matching the sender email address the system will create an expense with the-first-employee-linked-to-an-user as employee, which is totally wrong. Furthermore, the guy that sent the email will not see the created expense because it hasn't been assigned to him. - Everyone can create expenses, I don't even imagine how fast we can overload the database with a huge pile of crap
Diffstat (limited to 'addons/web/static/lib/jquery.mjs.nestedSortable/jquery.mjs.nestedSortable.js')
0 files changed, 0 insertions, 0 deletions