diff options
| author | Martin Trigaux <mat@odoo.com> | 2017-11-09 14:24:52 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2017-11-09 15:51:14 +0100 |
| commit | f8540501aca60feea8108691b7ad5a9afa030aa0 (patch) | |
| tree | 48d6b36d68d487478edf3ddb2acf44b6d105ab44 /addons/web_editor/static/src/js/iframe.js | |
| parent | a63ecee47ac271b1f0a23528d9d5eab7f63ae528 (diff) | |
[FIX] hr_expense: verify the constrain server side too
The groups were set only on the view which does not prevent abuses.
The fact that users can bypass the groups on the view is not critical as the
changes are logged but this should be improved nevertheless.
In master, proper record rules should be set.
Closes #20427
Diffstat (limited to 'addons/web_editor/static/src/js/iframe.js')
0 files changed, 0 insertions, 0 deletions