Audit Control
Smart audit trail, risk review, alerts, evidence attachments, and approval workflow for sensitive Odoo records.
Control sensitive changes before they become audit problems
Audit Control records who changed what, when it changed, the old value, the new value, the source, the risk level, and the reviewer decision. It is built for finance, HR, inventory, accounting, sales, and access-control teams that need a reliable review trail inside Odoo.
Configurable audit rules
Choose the Odoo model, tracked fields, ignored fields, operations, risk level, review deadline, masking, and alert policy.
Risk-based review workflow
Move logs through New, In Review, Waiting Info, Escalated, Reviewed, and Ignored states with reviewer controls.
Evidence and clarification
Attach evidence files, request clarification from the user who made the change, and preserve responses as history.
Activities and notifications
Create Odoo activities, inbox messages, and email queue entries for high-risk changes and close managed activities automatically.
Self-review protection
Prevent the same user who made a sensitive change from marking the audit log as reviewed.
Tamper-resistant records
Reviewed and ignored logs are locked. Only Audit Super Admins can send closed logs back to In Review.
Ready-made audit presets
Start quickly with practical presets for common control areas. Enable a preset to create an audit rule with the right model, fields, risk level, notification behavior, reason requirement, and masking configuration.
Preset list grouped by category with risk level, reason requirement, notification setting, and one-click Enable action.
Preset details show the target model, tracked fields, operations, risk level, masking, notification behavior, and description before enabling.
Precise rule configuration
Define exactly what should be audited. Track create, write, and delete operations, select sensitive fields, ignore noisy fields, mask confidential values, set deadlines, and choose who should be notified.
- Track any installed non-transient Odoo model.
- Select tracked fields or leave the rule broad.
- Set Low, Medium, High, or Critical risk levels.
- Notify users by activity, inbox, and email.
- Enable high-risk-only notification policy.
Example rule tracking contact name, email, and phone changes with high-risk alerts and self-review prevention.
Full review trail on every log
Each audit log gives reviewers the exact context they need: changed record, field, old value, new value, source, user, risk level, assigned reviewer, deadline, review outcome, and chatter history.
Reviewers can compare before and after values, open the affected record, mark outcomes, ignore, escalate, or send back to In Review when authorized.
Evidence attachments and clarification workflow
Audit Control keeps the proof next to the reviewed event. Reviewers can attach evidence, request clarification, receive a response, and keep request and response files in an immutable history line.
Evidence files, clarification request attachments, response notes, response attachments, answered-by user, response datetime, and technical details are available on the same log.
Role-based access for controlled audit operations
Separate responsibilities across normal users, reviewers, and super admins. Users can respond to their own clarification requests. Reviewers can manage review workflows. Super admins can manage configuration and reopen closed audit logs.
Native Odoo access rights expose Audit Control roles directly on the user form.
Typical workflow
Configure
Create audit rules manually or enable presets for finance, HR, inventory, sales, accounting, and security controls.
Capture
Odoo changes create audit logs with operation, user, field, old value, new value, source, risk, and notification state.
Review
Assign reviewers, enforce deadlines, prevent self-review, request clarification, add evidence, and choose the outcome.
Close
Mark logs Reviewed or Ignored, automatically close managed activities, and lock records against normal edits.
Included features
Central Audit Logs menu
Search, filter, group, review, pivot, and graph audit records from one operational area.
Business reason tracking
Flag logs that require a business reason and allow integrations to pass reasons through context.
Sensitive value masking
Protect bank, salary, password, token, and identification-like values from casual exposure.
Escalation support
Escalate audit logs to another user with reason tracking, activities, and chatter messages.
Clarification history
Preserve reviewer requests and user responses with attachments, state, users, and timestamps.
Multi-company aware
Audit logs store company context and use Odoo security controls for access isolation.
Support and customization
For questions, installation help, or custom audit-control workflows, contact adilak389@gmail.com.
Author: Adil Akbar
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 1728 |
| Technical Name |
ad_audit_control |
| License | OPL-1 |
| Website | https://github.com/aadilakbar |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module