Skip to Content
Menu
This question has been flagged
2 Replies
3336 Views

HI, Im planing to implement odoo in my company. Im planing to hire a local company to do some custom modules and implement everything for us (that's what they've been doing for 10+ years). 

My question is, how do I make sure my data will be safe? In other words developers wont sell, dump, or steal my data?

Does odoo have different layers? for an example, developers just have access to the code base layer and dummy data not the actual data? Im new to this please guide me on this. I can remove their access once we are up and running but what if they want to do bug fixes etc in a few months time? How do other medium size companies tackle this safety and security issue?

Im paranoid about this because similar cases have happened that I know of (not related to this system) so I want to make sure my data, companies data, customers data is safe as this system is going to be the central location for all the data. 

Also how safe is DigitalOcean databases? Do you think Amazon is safer or they are the same in terms of security and backups?

Thanks heaps. 

Avatar
Discard

This is an interesting question. I have previously worked in large corporations where there are policies on developer's access to production databases (this was with other ERP systems). It's not so easy to setup and definitely makes life more difficult. In my opinion, Odoo isn't designed to be used in this type of environment but it may be possible to solve these problems.

Best Answer

Did you check the Odoo.sh platform? There, for example, you can grant access to only the development branches. Use standard test data (provided by odoo database itself) and your own test data according to your custom modules. 

Give permission to a project manager to deploy tested modules to staging and production environments. 

If you host elsewhere you could also provide development environments for developers.  Give access to staging (also called sandboxes) and production to people you trust more. 

Your question has to be answered by any project with sensitive data. And it is not easy to be solved as the right set of test data is crucial. 

Finally, you have to find a person you have confidence in.

 


Avatar
Discard
Related Posts Replies Views Activity
2
Aug 24
375
1
Nov 15
3989
2
Feb 24
1037
1
Oct 23
6413
2
Sep 21
8235