You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: spp_change_request_v2/readme/HISTORY.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,11 @@
1
-
### 19.0.2.0.6
1
+
### 19.0.2.0.7
2
2
3
3
- fix(security): align CR Requestor / CR Local Validator / CR HQ Validator roles with the OP#951 menu audit — replace the `spp_registry.group_registry_read` (Tier-3, no menu) link with `spp_registry.group_registry_viewer` so these roles see the Registry menu; add `spp_hazard.group_hazard_viewer` so they retain Hazard visibility once the menu root is gated. Adds `spp_hazard` to module dependencies.
4
4
5
+
### 19.0.2.0.6
6
+
7
+
- fix(views): route post-submit CRs (pending / approved / applied / rejected) through the stage review form when opened from the list, matching the Edit Details → Upload Documents → Review & Submit breadcrumb workflow used for fresh CRs (#920 round-2). Demo-generated CRs in "Applied" state previously landed on the legacy main form view from the list — now they open in `spp_change_request_review_form` like manually-created CRs. Adds the missing `_action_open_review_form` / `_action_open_documents_form` helpers and wires `action="action_open_stage_form" type="object"` on the CR list so row-click goes through the stage router.
8
+
5
9
### 19.0.2.0.5
6
10
7
11
- fix(security): add a global `ir.rule` on `spp.change.request` that filters by `registrant_id.area_id` against the user's `center_area_ids` (OP#989 round-2). The earlier `_prepare_domain` override only caught `search_read` / `web_search_read` and missed the registrant Many2one picker (which uses `name_search` → `_search`), so users could still select out-of-area registrants. The conditional domain is a no-op for users with no center areas (global roles).
and wires <ttclass="docutils literal"><spanclass="pre">action="action_open_stage_form"</span><spanclass="pre">type="object"</span></tt> on the CR
1365
+
list so row-click goes through the stage router.</li>
1366
+
</ul>
1367
+
</div>
1368
+
<divclass="section" id="section-3">
1354
1369
<h1>19.0.2.0.5</h1>
1355
1370
<ulclass="simple">
1356
1371
<li>fix(security): add a global <ttclass="docutils literal">ir.rule</tt> on <ttclass="docutils literal">spp.change.request</tt> that
@@ -1363,27 +1378,27 @@ <h1>19.0.2.0.5</h1>
1363
1378
roles).</li>
1364
1379
</ul>
1365
1380
</div>
1366
-
<divclass="section" id="section-3">
1381
+
<divclass="section" id="section-4">
1367
1382
<h1>19.0.2.0.3</h1>
1368
1383
<ulclass="simple">
1369
1384
<li>fix: add HTML escaping to all computed Html fields with
1370
1385
<ttclass="docutils literal">sanitize=False</tt> to prevent stored XSS (#50)</li>
1371
1386
</ul>
1372
1387
</div>
1373
-
<divclass="section" id="section-4">
1388
+
<divclass="section" id="section-5">
1374
1389
<h1>19.0.2.0.2</h1>
1375
1390
<ulclass="simple">
1376
1391
<li>fix: fix batch approval wizard line deletion (#130)</li>
1377
1392
</ul>
1378
1393
</div>
1379
-
<divclass="section" id="section-5">
1394
+
<divclass="section" id="section-6">
1380
1395
<h1>19.0.2.0.1</h1>
1381
1396
<ulclass="simple">
1382
1397
<li>fix: skip field types before getattr and isolate detail prefetch
0 commit comments