Restrict Access Right User from increasing Access Level
by Strait Coders https://straitcoders.com/$ 10.00
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Lines of code | 26 |
| Technical Name |
restrict_access_right_user |
| License | OPL-1 |
| Website | https://straitcoders.com/ |
| Versions | 16.0 17.0 18.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Lines of code | 26 |
| Technical Name |
restrict_access_right_user |
| License | OPL-1 |
| Website | https://straitcoders.com/ |
| Versions | 16.0 17.0 18.0 |
Prevent Privilege Escalation
Restrict "Access Rights" users from granting "Settings" access
Watch Complete Demo here:- YouTube Demo Video
Enhanced Security for Your Odoo Instance
Maintain control over who has the highest level of access
How It Works
Simple, effective, and transparent
When a user with only "Access Rights" attempts to save a user form after changing the access level to "Settings", the module will raise a clear and informative error message, blocking the change.
This happens silently in the background and doesn't interfere with any other user management tasks.
Easy to Install and Use
No configuration needed
Simply install the module, and the restriction will be active immediately. There are no settings to configure.
About Us
Strait Coders specializes in developing powerful and user-friendly Odoo apps for HR and business automation. Our team ensures high-quality, scalable, and secure modules to meet your business needs.
Visit our website
Check out our Youtube
Welcome to the Restrict Access Right User Documentation!
Overview
The Restrict Access Right User module is a security enhancement for Odoo that prevents privilege escalation. It specifically blocks users who have "Access Rights" administrative privileges from granting themselves or other users the higher "Settings" privilege level. This ensures a stricter separation of duties and enhances the overall security of your Odoo instance.
Features
- Prevent Privilege Escalation: Blocks 'Access Rights' users from creating or promoting any user to the 'Settings' level.
- Protect System Administrators: An 'Access Rights' user cannot edit or modify a user who already has 'Settings' access.
- Self-Protection: Prevents an 'Access Rights' user from accidentally lowering their own access level.
- Transparent Operation: Works in the background by overriding the create and write methods of user records.
- Informative Feedback: Raises clear, understandable error messages when a restricted action is attempted.
- Zero Configuration: No setup is required. The restrictions are active immediately after installation.
Prerequisites
- Odoo version: 16.0 or later
- Installed modules: base (core Odoo module)
- Administrator access to the Odoo instance for installation.
Installation
Follow these steps to install the module:
- Download the Module: - Obtain the module files from the Odoo App Store. - Place the restrict_access_right_user folder in your Odoo addons directory.
- Update the Modules List: - Log in to your Odoo instance as an administrator. - Activate developer mode. - Navigate to the Apps menu. - Click on Update Apps List.
- Install the Module: - In the Apps menu, Remove default filter and search for Restrict Access Right User. - Click Install.
Configuration
No configuration is needed. The module works out of the box.
Usage
The module's restrictions are applied automatically. If a user with only "Access Rights" privileges attempts to perform a forbidden action (e.g., change a user's administration level to "Settings"), Odoo will block the operation and display an error message explaining the restriction.
License
This module is licensed under the OPL-1 (Odoo Proprietary License v1.0). See the Odoo App Store page for more details.
Support
For issues, feature requests, or support, please contact the module author at: straitcoders@gmail.com
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module