Note:

You can not grant access to the restricted menu items using Odoo access rights. Restrict menus for the Employee security group with caution.

User with superadmin rights gets full access regardless of restriction. This is done to avoid accidental permanent restrictions.

Hide menu by security groups

Hide menu from a specific user (Menu Items settings)

Restrict menu from a specific user (User settings)

Restrict report from a specific user (User settings)

Restrict menu from a specific groups

Give access to the specific menus only

Note

The user menu settings has high priority than group ones. When menus specified in user settings, only they will be visible, even if others setted up in group of user.

Restrict action from a specific groups

Restrict contextual server action from a specific user

Hide specific fields of the selected model from certain security groups

For this, you need to activate the Developer Mode. Then, click Database Structure -> Models and select the desired model. On the Fields Security tab, specify the fields to hide or make readonly, and user security groups to hide from.

Make a field readonly

Hide stat buttons on the view

You can overwrite the parameters of Many2one fields from the user interface. When you select Many2one field, you will see additional options. To use these options, select the Rewrite Options checkbox.

Rewrite field parameter: ('no_open'=True)

This parameter makes the following changes:

• In the Read mode, fields that are usually rendered and displayed as a link will be displayed as a normal readonly text
• In the Edit mode, the button to open the record will be hidden

Rewrite field parameter: ('no_create'=True)

This parameter forbids the creation of new records.

Rewrite field parameter: ('no_quick_create'=True)

This parameter forbids the quick create of new records. Users can still create them using Create and edit... option.

Rewrite field parameter: ('no_create_edit'=True)

This parameter forbids the creation of new records using Create and edit... option. Users can still create records with quick create.

Apply restrictions to model via 'code' domain type

You can specify the model and set record rules by which grant access to:

• Read
• Create
• Write
• Unlink

The following example hides projects for a project user group, except for those where the current user is the project manager.

Apply restrictions to model via 'simply' domain type

The following example hides folded Tasks for the specific user Mitchel Admin.

This module is part of the Bureaucrat ITSM project. You can try it by the links below.