Skip to content

Commit

Permalink
[14.0] [IMP] payroll: improve security
Browse files Browse the repository at this point in the history
  • Loading branch information
nimarosa committed Nov 9, 2022
1 parent a38beea commit ba33fc2
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 5 deletions.
4 changes: 3 additions & 1 deletion payroll/security/hr_payroll_security.xml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,9 @@
</record>
<!-- Allow python editing -->
<record id="group_payroll_allow_python" model="res.groups">
<field name="name">Payroll: Allow to edit python code in rules</field>
<field
name="name"
>Payroll: Allow editing python code in salary rules</field>
<field name="category_id" ref="base.module_category_hidden" />
<field name="implied_ids" eval="[(4, ref('payroll.group_payroll_user'))]" />
</record>
Expand Down
8 changes: 4 additions & 4 deletions payroll/views/hr_salary_rule_views.xml
Original file line number Diff line number Diff line change
Expand Up @@ -139,9 +139,9 @@
<p>
<h4><strong>Security Notice</strong></h4><br />
<strong
>You are NOT allowed to see rule code.</strong><br
>You are NOT allowed to see the rule python code.</strong><br
/>
Salary rule code view and editing is only allowed to user with the required access rights.
Salary rule code view and editing is only allowed to users with the required specific access rights.
If you think there is an error, ask your system adminsitrator.
</p>
</div>
Expand Down Expand Up @@ -210,9 +210,9 @@
<p>
<h4><strong>Security Notice</strong></h4><br />
<strong
>You are NOT allowed to see rule code.</strong><br
>You are NOT allowed to see the rule python code.</strong><br
/>
Salary rule code view and editing is only allowed to user with the required access rights.
Salary rule code view and editing is only allowed to users with the required specific access rights.
If you think there is an error, ask your system adminsitrator.
</p>
</div>
Expand Down

0 comments on commit ba33fc2

Please sign in to comment.