GDPR mailing list archives

gdpr@odoo-community.org

Avatar

Applicant and Employee personal addresses

by
ClosingAp Open Source Integrators Europe, LDA, Daniel Reis
- 19/04/2018 23:54:21
Hello all,

I would like to share this particular case I am concerned about:

Both Applicants and Employees are protected by ACLs: only authorized  
users can see that data.
Except for their personal address info: that information is stored in  
the Partner model, and is available to everyone in the Contacts app!

We need to add to Partners the "Is Applicant" and "Is Employee"  
fields, and and record access rules to ensure that only authorized  
people (HR Officials) can see them.


Regards
/DR






Follow-Ups