All issues

Search results

spp.group.membership: status/is_ended ignore start_date — a membership starting in the future counts as active today

bugSomething isn't workingSomething isn't working

Status: Open.

#421 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 14, 2026

spp.group.membership: archiving via active is inconsistent — set only by a UI onchange, never when the clock crosses ended_date

bugSomething isn't workingSomething isn't working

Status: Open.

#420 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 14, 2026

spp_registry: /mail/message/update_content controller is broken on Odoo 19 — calls removed ir.attachment._check_attachments_access

bugSomething isn't workingSomething isn't working

Status: Open.

#419 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 14, 2026

spp.group.membership: is_ended and status are stored computes that go stale with the clock — a future-dated ended_date never takes effect

bugSomething isn't workingSomething isn't working

Status: Open.

#417 In OpenSPP/OpenSPP2;

· kneckinator opened on Aug 14, 2026

spp_hide_menus_base: hide_menu() re-snapshots default_group_ids from an already-collapsed menu, permanently losing the real groups

Status: Open.

#410 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 12, 2026

security(spp_change_request_v2): compliance.yaml omits split_household.member and 90 of 93 record rules

Status: Open.

#405 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 10, 2026

security(spp_change_request_v2): the shipped 'CR Requestor' role grants Manager + approval-approver — least-privileged persona is fully privileged [Severity: High]

Status: Open.

#404 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 10, 2026

security(spp_change_request_v2): post-submit content freeze covers only field_mapping types — custom-strategy details stay writable [follow-up to #264]

Status: Open.

#403 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 10, 2026

security(spp_dci): rename the 'DCI Administrator' group — the name no longer describes what it grants [follow-up to #327]

Status: Open.

#398 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 10, 2026

spp_attachment_av_scan: 7 remaining except Exception sites can swallow database errors (follow-up to #384)

Status: Open.

#385 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Aug 3, 2026

spp_base_common: menu-icon env.ref hook can take down a job worker on a poisoned cursor

bugSomething isn't workingSomething isn't working

Status: Open.

#383 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Jul 31, 2026

security(spp_grm_cel): rule-engine entry points are unguarded RPC-callable methods [Severity: Medium]

Status: Open.

#381 In OpenSPP/OpenSPP2;

· gonzalesedwin1123 opened on Jul 28, 2026