| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 4636 |
| Technical Name |
access_right_manager |
| License | OPL-1 |
| Versions | 17.0 18.0 19.0 |
Access Right Manager
Advanced user access rights management through profiles
Centralize groups, access rights (ir.model.access), record rules (ir.rule) and menus into reusable User Profiles. Assign a profile once and every linked user inherits the exact same permissions — update the profile and all users are synchronized automatically.
Profile-Based Access Management
Create reusable User Profiles that bundle:
- Security groups
- Model access rights (CRUD)
- Record rules with domain filters
- Menu visibility
- Studio / Debug mode restrictions
Smart Buttons & Dashboard
Each profile exposes smart buttons showing at a glance how many users, groups, access rights and rules it controls.
One-Click Assignment on Users
On the standard user form, a new Profil d'acces tab lets you:
- Select a profile
- View the associated user type
- Apply or refresh rights with a single click
Key Features
Automatic Rights Propagation
When you modify a profile's groups, all linked users are updated automatically — no manual intervention required.
Studio & Debug Restrictions
Per-profile toggles to disable Studio and/or Debug mode for specific user populations. Enforced server-side on every request.
Portal User Creation
A dedicated wizard creates portal users with a profile in a single step, including partner linking and automatic group assignment.
Complete Audit Trail
Every change to profiles, users and groups is recorded with old/new values, timestamp and responsible user. Dedicated history views with filters and grouping.
Excel Export / Import
Export the full access matrix (groups, CRUD, record rules) across multiple Excel sheets. Import profiles with all their related data (Excel / XML / JSON) for easy migration between environments.
User Invitation with Profile
Invite new internal users by e-mail and assign them a profile directly from the invitation wizard.
Configuration
- Install the module.
- A default profile "Profil Complet — Utilisateurs Internes" is created
automatically with the group
base.group_user. - Go to Settings > Access Right Manager to configure:
- Default profile for new users
- 2FA enforcement for internal users
- Additional user types
- Create or edit profiles under Access Right Manager > User Profiles.
- Assign profiles to users.
Security Groups
| Group | Permissions |
|---|---|
| Access Right Manager / Read | Read-only on profiles and user types |
| Access Right Manager / Master | Full CRUD + export/import + report generation |
Technical Information
Models introduced
user.profile— profiles with groups, access rights and record rulesuser.type— user types (Internal, Portal, Public, custom)user.profile.history— profile change logres.groups.history— group change log with old/new valuesres.users.history— user change log
Models extended
res.users— profile assignment, automatic rights applicationres.partner— user type displayir.http— server-side Studio/Debug restrictionsres.config.settings— module configuration panel
Dependencies
base, portal, web, auth_totp
Odoo 19.0+ • License: OPL-1 • Author: Roldy Management
Access Right Manager
Advanced user access rights management through profiles that centralize groups, access rights (ir.model.access), record rules (ir.rule) and menus. Assign a profile once and every linked user inherits the exact same permissions -- update the profile and all users are synchronized automatically.
Key Features
Profile-Based Access Management
Create reusable User Profiles that bundle:
- Security groups
- Model access rights (CRUD)
- Record rules with domain filters
- Menu visibility
- Studio / Debug mode restrictions
Each profile exposes smart buttons that show at a glance how many users, groups, access rights and rules it controls.
One-Click Assignment on Users
On the standard user form, a new Profil d'acces tab lets you:
- Select a profile
- View the associated user type
- Apply or refresh rights with a single click
Automatic Rights Propagation
When you modify a profile's groups, all linked users are updated automatically -- no manual intervention required.
Studio & Debug Restrictions
Per-profile toggles to disable Studio and/or Debug mode for specific user populations. The restriction is enforced server-side on every request.
Complete Audit Trail
Every change to profiles, users and groups is recorded with:
- Old and new values
- Timestamp and responsible user
- Dedicated history views with filters and grouping
Export / Import
- Excel export of the full access matrix (groups, CRUD, record rules) across multiple sheets.
- Excel / XML / JSON import of profiles with all their related data for easy migration between environments.
Portal User Creation
A dedicated wizard creates portal users with a profile in a single step, including partner linking and automatic group assignment.
User Invitation
Invite new internal users by e-mail and assign them a profile directly from the invitation wizard.
Configuration
- Install the module.
- A default profile "Profil Complet -- Utilisateurs Internes" is created automatically with the user type "Utilisateur Interne" and the group base.group_user.
- Go to Settings > Access Right Manager to configure:
- Default profile for new users
- 2FA enforcement for internal users
- Additional user types
- Create or edit profiles under Access Right Manager > User Profiles.
- Assign profiles to users.
Security Groups
The module defines two groups under Administration:
| Group | Permissions |
|---|---|
| Access Right Manager / Read | Read-only on profiles and user types |
| Access Right Manager / Master | Full CRUD + export/import + report generation |
Technical Information
| Odoo version: | 19.0+ |
|---|---|
| License: | OPL-1 (Odoo Proprietary License) |
| Author: | Roldy Management |
| Dependencies: | base, portal, web, auth_totp |
| External Python: | |
| openpyxl, xlsxwriter | |
Models introduced:
- user.profile -- profiles with groups, access rights and record rules
- user.type -- user types (Internal, Portal, Public, custom)
- user.profile.history -- profile change log
- res.groups.history -- group change log with old/new values
- res.users.history -- user change log
Models extended:
- res.users -- profile assignment, automatic rights application
- res.partner -- user type display
- ir.http -- server-side Studio/Debug restrictions
- res.config.settings -- module configuration panel
Changelog
19.0.1.0.0
- Migration to Odoo 19: name_get() replaced by _compute_display_name(), security hardening, XML views compliance (help= on all buttons).
18.0.1.00
- Initial release with profile management, history tracking, export/import wizards, Studio/Debug restrictions, portal wizard and access report.
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module