Skip to Content
This question has been flagged
settingsaccessrightsadministrator
2 Respostes
3758 Vistes
Avatar
Mihail Tsvetkov

The issue described below is experienced on Odoo 12 CE.

The default Administrator, who is created upon DB creation is of type Administrator/Settings. For simplicity we name it User1. User1 creates User2. User1 gives Administrator/Access Rights to User2. Now User2 is able to:

- Delete User 1 ?!?!

- Self promote to Administrator/Settings ?!?!

How can we prevent User2 from both actions above and thus secure User1?

Thank you in advance for any suggestions.

Avatar
Descartar
Avatar
Mihail Tsvetkov
Autor Best Answer

Balvant, you are wrong my friend! I have tested it 100 times and it always happens. Now check the screen shots in the exact order. Fresh Odoo12 CE. At the end Administrator is deleted and gone...

https://prnt.sc/przud5
https://prnt.sc/przums
https://prnt.sc/przuyv
https://prnt.sc/przvax
https://prnt.sc/przvmv
https://prnt.sc/przvz8
https://prnt.sc/przw8y
https://prnt.sc/przwhy

So, please feedback is necessary...how to secure Administrator account !!!

Avatar
Descartar
Avatar
Balvant Ramani
Best Answer

There is no chance to Delete Administrative account in odoo. Odoo does not allow. so don't worry about it

Avatar
Descartar
Related Posts Respostes Vistes Activitat
Admin rights changed in error Solved
rights administrator
Avatar
Avatar
2
d’oct. 24
1219
Custom Access Rights are not visible in normal mode, Only visible under Developer mode (v16)
access rights
Avatar
0
d’ag. 23
8
How to learn Access Rights
access rights
Avatar
Avatar
Avatar
2
de nov. 22
3206
In a project only the admin can see the team members but the user can't
access rights
Avatar
Avatar
2
de març 15
4447
The requested operation cannot be completed due to security restrictions. Please contact your system administrator. document type: users, operation:read.
error access rights
Avatar
Avatar
1
de març 22
3169