Skip to Content
This question has been flagged
securitydocumentationaccountprivacyopenerp.com
2 Replies
6614 Views
Avatar
FRACHT FWO CZECH

Hi, I would like to know which kind of data is exchanged between a local openerp 7 instance and openerp.com. In the default install I see the "my openerp.com account" menu item - when I click it, I am redirected to openerp.com and there I can see the name of the database I just installed - I did not investigate if this happens via javascript or whatever, but I never agreed to send any data to openerp.com from the local install, not even the name of the local database.

This makes me kind of unsafe - which data is exchanged between my local instance and openerp.com? Is there any way, to control this (on applicatin level)? I would like to read detailed information about this, so we can better understand, if there will be still enough space between our customer data and the cloud, if we start using OE7... also I would like to know if there is any inbuilt remote access or data transfer feature and if yes, how to unwire this (besides using openerp in a private network only).

Thank you very much for your attention!

Avatar
Discard
Avatar
patrick
Best Answer

As far as I know, the local installation does try to get some information from the servers of OE, in order to show you the various apps you can install. If some of them have been updated since last time, when you go to Settings -> Apply Scheduled Updates, it will show a popup to ask you permission to update the system.

You should be able to find all instances where it does a callback, if you look through the code (which is distributed with the installation).

Avatar
Discard
FRACHT FWO CZECH
Author

thanks, yes of course I can just grep the source - however it would be interesting to read what kind of policy does exist regarding client data on local OE7 instances. I do not suspect to find anythig evil here, but I need a clear statement about this that I can forward to management and customers. I did not find anything about this - would be helpful to open the doors into companies that are still trying to keep the walls between internal and external services as high as possible. Yes, privacy aware companies do still exist, even in times of prism cloud. :)

Avatar
Peter Nietz
Best Answer

I have the same problem here. I think it is still in the policies of Odoo and resellers that the server phones home.

I would recommend to check out the openerp community backports at https://github.com/OCA/OCB

If you need help installing from ocb just comment or pm me so I can post a complete "howto install ocb8 on ubuntu".

There is also an app you can install which should prevent phoning home: https://bitbucket.org/BizzAppDev/oerp_no_phoning_home

For more infos check this thread: https://www.odoo.com/forum/help-1/question/install-community-with-one-click-54562

Avatar
Discard
Related Posts Replies Views Activity
[Fail security v12] For the fight against the falsification of identity
security mail create account
Avatar
0
Feb 19
3051
How to bypass record rules for specific model? Solved
security account record_rules intercompany odooV8
Avatar
Avatar
Avatar
2
May 22
11018
Mac Id restriction for Users in Odoo enterprise
security
Avatar
0
Dec 25
136
what is the differance between access right and record rules in odoo ? Solved
security
Avatar
Avatar
Avatar
Avatar
Avatar
5
Sep 25
15881
User Session Bug.
security
Avatar
0
Jun 25
1134