Attendance Rule Restriction | WiFi · IP · GPS · Time · Device | Multi-Layer Check-in Control for Odoo

Stop buddy punching and remote check-ins for good. This module gives you a powerful, configurable rule engine that enforces exactly where, when, and how your employees can clock in and out — all natively inside Odoo, with zero third-party dependencies.

🔒 Multi-Layer Rule Engine — AND Logic Across All Rules

Configure multiple independent rules. Each rule must pass before a check-in is accepted. Within each rule, multiple allowed values use OR logic — giving you precise, flexible control without complexity.

🌐 IP Range Rule — Enforce Company Network for Systray Users

For employees using the Odoo Systray attendance button on their own computers, enforce that they must be on the company network before clocking in or out.

✅ Supports single IP and CIDR notation (e.g. 174.186.2.0/24).
✅ Configure multiple allowed IP ranges — useful for companies with multiple offices or VPN subnets.
✅ Built-in "Add My Current IP" button — admins can detect and add their own IP in one click.

📶 WiFi Rule — Server-Side Detection, No App Required

The WiFi rule is purpose-built for Kiosk deployments where Odoo runs on a dedicated on-site device (e.g. a reception terminal or factory floor kiosk).

When an employee checks in at the Kiosk, the server reads the WiFi network that the Odoo server device itself is connected to — matching against your configured allowed SSIDs and BSSIDs. No mobile app, no browser permissions, no employee action required.

✅ SSID matching — match by WiFi network name.
✅ BSSID matching — match by router MAC address for pinpoint accuracy.
✅ Multi-entry support — allow multiple access points (OR logic), perfect for offices with multiple routers.
⚠️ Note: WiFi detection reads the network of the machine running Odoo. This rule is ideal for fixed on-premise Kiosk setups, not for remote or cloud-hosted deployments.

📍 Geolocation Rule — GPS Radius Enforcement

Require employees to be physically within a defined radius of your office before they can check in. Uses the browser's native GPS — no third-party location service needed.

✅ Define multiple allowed locations — head office, branch, warehouse, and more.
✅ Configurable radius per location (recommended: 100–500m).
✅ Built-in "Add My Current Location" button for instant coordinate capture.
✅ Works with both Kiosk and Systray modes when location tracking is enabled in Odoo settings.

⏰ Time Range Rule — Separate Windows for Check-in and Check-out

Prevent early check-ins, late check-outs, and after-hours attendance manipulation. Define separate allowed time windows for check-in and check-out actions, with full weekday control.

✅ Independent time windows for Check-in and Check-out.
✅ Per-weekday configuration — different rules for weekdays vs weekends.
✅ Multiple time slots per type (OR logic) — support shift workers with ease.
✅ Time is evaluated against the company's configured timezone.

💻 Device Rule — Control Which Devices Can Clock In

Restrict attendance to company-approved device types, platforms, or browsers. Prevent employees from checking in via personal devices or unauthorized browsers.

✅ Filter by device type: Computer or Mobile.
✅ Filter by platform: Windows, Android, iPhone, iPad, and more.
✅ Filter by browser: Chrome, Firefox, Safari, Edge, and more.
✅ Partial and case-insensitive matching — no need for exact strings.

⚙️ Designed for Flexibility and Scalability

- AND across rules, OR within rules — intuitive logic that covers real-world scenarios.
- Company-scoped — each rule belongs to a company, supporting multi-company setups.
- Extensible architecture — new rule types can be added with minimal code changes.
- No JS changes required for WiFi, IP, Time, and Device rules — purely server-side.
- Clear error messages — employees are told exactly which rule blocked them and why.

For support or customization inquiries, please contact us at 18438630181@163.com