Restricted administration rights
by IT-Projects LLC https://twitter.com/OdooFree , Ivan Yelizariev https://twitter.com/OdooFree
Odoo
Included Dependencies | Show |
Lines of code | 202 |
Technical Name |
access_restricted |
Website | https://twitter.com/OdooFree |
Also available in version | v 10.0 v 8.0 v 12.0 v 9.0 v 11.0 v 13.0 |
Restricted administration rights
Apply strict restriction on what an admin can do
Version: v14.0.1.3.5
Tested and maintained by
IT Projects Labs
Assitance: help@itpp.dev
No access — no way to grant it themselves
For example, if Mitchell Admin has no access to Sales

Mitchell Admin cannot grant access to Sales to himself or to any other user
He even doesn't see the option!

Let our expertise work for you!
(Doors and windows below are clickable)
/itpp-labs-1100.jpg)
/itpp-labs-930.jpg)
/itpp-labs-690.jpg)
Restricted administration rights
Installation
- Install this module in a usual way
Configuration
- By default all users except a superuser restricted to escalate the privileges
- There is only one configuration option this module provides. Under superuser open menu [[ Settings ]] >> Users & Companies >> Users
- In Access Rights tab you can select 'Allow add implied groups from settings' - to allow some users to configure modules by means of group_XXX fields from Settings menus
Usage
Let's take Sales (sale_management) module as an example.
Without this module installed:
- Say you have a user with administration rights Administration: Access Rights. This user thus may increase his own rights in Application Accesses from Sales: User: Own Documents Only to Sales: Administrator. Also he can open menu [[ Sales ]] >> Configuration >> Settings and select Customer Addresses there and then click [Apply] button (adding group_sale_delivery_address)
With this module installed:
- The user from previous example cannot increase his privileges. There is no Sales: Manager option for him, and also no Customer Addresses option in module configuration
- The only exception is done for users who are in special group 'Allow add implied groups from settings' - if your user is included in this group by the superuser then you may select Customer Addresses from Sale module Configuration >> Settings menu
Please log in to comment on this module
Report comment
Any abuse of this reporting system will be penalizedThere are no ratings yet!
How can I undo the changes made by this module?
That it's ... How can I undo the changes made by this module?
It makes some issues with some admin privileges.
Thank you.
Re: How can I undo the changes made by this module?
Hello!
You can uninstall the module or login as superuser