Skip to Content
This question has been flagged
securitydevelopmentaccess
2 Respostes
5419 Vistes
Avatar
uu3

HI, Im planing to implement odoo in my company. Im planing to hire a local company to do some custom modules and implement everything for us (that's what they've been doing for 10+ years). 

My question is, how do I make sure my data will be safe? In other words developers wont sell, dump, or steal my data?

Does odoo have different layers? for an example, developers just have access to the code base layer and dummy data not the actual data? Im new to this please guide me on this. I can remove their access once we are up and running but what if they want to do bug fixes etc in a few months time? How do other medium size companies tackle this safety and security issue?

Im paranoid about this because similar cases have happened that I know of (not related to this system) so I want to make sure my data, companies data, customers data is safe as this system is going to be the central location for all the data. 

Also how safe is DigitalOcean databases? Do you think Amazon is safer or they are the same in terms of security and backups?

Thanks heaps. 

Avatar
Descartar
Chris TRINGHAM

This is an interesting question. I have previously worked in large corporations where there are policies on developer's access to production databases (this was with other ERP systems). It's not so easy to setup and definitely makes life more difficult. In my opinion, Odoo isn't designed to be used in this type of environment but it may be possible to solve these problems.

Avatar
dygytally.de GmbH
Best Answer

Did you check the Odoo.sh platform? There, for example, you can grant access to only the development branches. Use standard test data (provided by odoo database itself) and your own test data according to your custom modules. 

Give permission to a project manager to deploy tested modules to staging and production environments. 

If you host elsewhere you could also provide development environments for developers.  Give access to staging (also called sandboxes) and production to people you trust more. 

Your question has to be answered by any project with sensitive data. And it is not easy to be solved as the right set of test data is crucial. 

Finally, you have to find a person you have confidence in.

 


Avatar
Descartar
Related Posts Respostes Vistes Activitat
can't access my module data in odoo 17 via GET method in postman Solved
security access
Avatar
Avatar
2
d’ag. 24
3039
How do I hide the Procurements Tab in Product Template for Sales Users? Solved
security access
Avatar
1
de nov. 15
5591
What’s the best architecture to manage multi-tenant Odoo setup with white-label support?
security development configuration
Avatar
0
d’oct. 25
492
How to configure field permission for 2 groups? Solved
security access Development
Avatar
Avatar
Avatar
2
de febr. 24
1181
How to restrict user from accessing views by changing the action id,menu id in the url
security access Odoo12.0
Avatar
Avatar
1
de set. 25
8746