Key Features

• Contact Admin Only Access — Only users with the Contact Admin security group can view phone and email details for all contacts across list, kanban, and form views.
• Hidden Phone & Email for Other Users — Users without Contact Admin access cannot see the phone or email fields on contacts created by other users.
• Own Contacts Always Accessible — Every user retains full visibility of phone and email on the res.partner records they personally created.
• Restricted Contact Form Opening — Clicking a contact created by another user does not open its form view unless Contact Admin access is granted.
• Export Restricted to Contact Admin — Bulk export of contact data from list views is restricted to Contact Admin users only, blocking unauthorized data dumps.
• No Change to Existing Contact Data — The module only applies view and access restrictions; it does not alter, duplicate, or migrate any existing res.partner records.

How This Helps Your Business

In many companies, sales reps, support staff, and back-office users all work from the same Contacts app, which by default exposes every contact's phone number and email to every internal user. This creates a real risk: a departing employee, a curious staff member, or a compromised login can export your entire customer and prospect list in a few clicks.

With sh_list_view_restrict installed, a sales manager can grant the Contact Admin group only to team leads or CRM owners, while regular sales reps only see the contacts they personally added. A rep working their own leads sees exactly what they need; they cannot browse, open, or export contacts belonging to colleagues. When a rep changes teams or leaves the company, no bulk export of the customer database is possible without Contact Admin rights, reducing the risk of customer data walking out the door to a competitor.

This is particularly useful for call centers, multi-branch sales teams, franchise operations, and any business handling sensitive customer contact information where data protection or internal confidentiality policies (e.g. GDPR-style access control) require restricting who can see and export personal data.

How It Works

1. Assign the Contact Admin Group in User Settings

Go to Settings → Users & Companies → Users, open a user form, and assign the Contact Admin group under the access rights section. Users in this group get full visibility of phone and email details across all contacts.

2. Phone & Email Hidden in Contact List for Non-Admin Users

Users without Contact Admin access cannot see phone or email fields for contacts created by other users, in both the list view and kanban view of the Contacts app.

3. Click-to-Open Restricted for Other Users' Contacts

When a non-authorized user clicks a contact created by another user, the contact form does not open — protecting record details from unauthorized viewing.

4. Export Restricted to Contact Admin

Exporting contact data via the list view's Export action is restricted to Contact Admin users only, preventing unauthorized bulk data extraction.

5. Full Contact Access After Contact Admin Activation

Once Contact Admin access is enabled for a user, that user can view phone and email fields for all contacts and open any contact form without restriction.

6. Phone & Email Visible in Contact List for Admin Users

Contact Admin users see phone and email details directly in the contacts list view and kanban, with no extra clicks required.

7. Contact Form Opens After Contact Admin Access

With Contact Admin access granted, the form view opens normally for contacts created by other users, giving admins complete visibility for support, auditing, or data management tasks.

Installation & Configuration

1. Upload and install sh_list_view_restrict from Apps like any other Odoo module (ensure the Contacts app is already installed, as this module depends on res.partner).
2. Go to Settings → Users & Companies → Users and open the user form of anyone who should have unrestricted access.
3. Under the access rights section, assign the Contact Admin group to that user, then save.
4. Log in as a regular (non-admin) user and open Contacts to confirm phone/email fields are hidden and form access is blocked for contacts created by other users.
5. Log in as a Contact Admin user to confirm full visibility, form access, and export capability across all contacts.
6. Review group assignments periodically from Settings → Users & Companies → Groups to keep Contact Admin membership limited to the appropriate roles.

No additional configuration, cron jobs, or server parameters are required — access control is enforced automatically once the group is assigned.

Why This Module Matters

Customer contact information is one of the most sensitive and commercially valuable data sets in any business. Odoo's default Contacts access model does not distinguish between "my contacts" and "everyone's contacts" — every internal user with Contacts access can view and export phone numbers and emails belonging to any other user's records. This module closes that gap with a simple, role-based control that fits naturally into Odoo's existing security group structure, without requiring custom development, extra servers, or changes to how your team already works in Contacts.

Compatibility

Frequently Asked Questions

Can I assign Contact Admin to a group of users at once?

Yes — assign the Contact Admin group from Settings → Users & Companies, either on individual user forms or via the Groups configuration page, to apply it to multiple users efficiently.

Does this affect CRM leads and opportunities, or only the Contacts module?

This module applies restrictions to Contacts (res.partner) records. It does not restrict CRM leads and opportunities. Contact us if you need a customized extension for CRM.

What happens when a Contact Admin user views a restricted contact?

Contact Admin users have full unrestricted access — they can see phone, email, and open any contact form regardless of who created it.

Is this compatible with Odoo Community edition?

Yes — compatible with Community and Enterprise editions on Odoo.sh and On-Premise. It requires the Contacts module. It is not available for Odoo Online (SaaS) deployments.

Will this module affect existing automations, imports, or API access to contacts?

The restrictions apply to user-facing list, kanban, and form views and the Export action. For automated imports, server actions, or custom API integrations, review your specific setup with our support team to confirm expected behavior.