GDPR mailing list archives

gdpr@odoo-community.org

Avatar

Re: Applicant and Employee personal addresses

by Luis Antunes <lfb@thinkopen.solutions> - 20/04/2018 13:21:54
Hello Daniel,

Is there a shared doc where we can place the scope of the needed GDPR tasks?
It would be important to setup such a document, so that we can align ourselves on this ASAP.

Thanks,


 Luis Brito Antunes  
 MANAGING PARTNER - PT
 +351 919 021 428
 LISBOA | Av. das Túlipas 6, 13º A/B  1495-161 Algés
 

2018-04-19 23:02 GMT+01:00 Daniel Reis <dgreis@sapo.pt>:
Hello all,

I would like to share this particular case I am concerned about:

Both Applicants and Employees are protected by ACLs: only authorized  
users can see that data.
Except for their personal address info: that information is stored in  
the Partner model, and is available to everyone in the Contacts app!

We need to add to Partners the "Is Applicant" and "Is Employee"  
fields, and and record access rules to ensure that only authorized  
people (HR Officials) can see them.


Regards
/DR






_______________________________________________
Mailing-List: https://odoo-community.org/groups/gdpr-61
Post to: mailto:gdpr@odoo-community.org
Unsubscribe: https://odoo-community.org/groups?unsubscribe


Reference