i have my odoo 13 ce setup as a multi-companies environment.
there are 7 companies and over 500 contacts.
i read doc saying Odoo 13 should separate contacts to different company if the 'company' field is defined for contact.
however, i see this is NOT the case. Contact still visible to other users even they have no access rights to the allowed company.
For example,
contact c1 is defined for company p1
user u2 can only access company p2
but u2 can see c1?
Is this a bug? Or there is extra setting required to control the contact visibility?
Unluckily my problem of contact visibility is still there, but luckily I eventually probably found out the confusing aspect of this issue.
I would believe the Contact visibility of Odoo in a multi-companies setup is working.
The reason users still able to see contacts not belonged to their company because the 'Company' field I seen on my Odoo setup IS NOT the 'Company' required to distinguished between companies in Odoo.
Why I know?
When I create a contact via Contact Form, this contact is visible/invisible properly among companies.
However, when I import contacts from xlsx with the field 'Company' as I seen, these contacts visible to all users.
That means the 'Company' seen is not the same as the Odoo 'Company' required, (or an additional field required).
So what help?
I create a contact from Odoo Contact Form and export that contact from Action->Export and select required fields to export, there are many Company field for selection, will you know which 'Company' is the 'Company' required by Odoo security control?