Just wanted to highlight this [1] bug I reported several months ago regarding several security flaws which have not been solved as of yet. The bug was marked as public by OpenERP sa, so you may want to add your comments or patchs. Anyway, I think it's important everyone administering an OpenERP server must at least be aware that any user can change information in properties, for example:
https://bugs.launchpad.net/openobject-server/+bug/657013 -- Albert Cervera i Areny http://www.NaN-tic.com OpenERP Partners Tel: +34 93 553 18 03 skype: nan-oficina http://twitter.com/albertnan http://www.nan-tic.com/blog
_______________________________________________ Mailing list: https://launchpad.net/~openerp-expert-framework Post to : [email protected] Unsubscribe : https://launchpad.net/~openerp-expert-framework More help : https://help.launchpad.net/ListHelp
