This question has been flagged
3728 Views

Hello everyone,

I'd like to integrate an etherpad to odoo. I already created an etherpad server and it is working properly.


I added the API key to odoo and odoo is able to create or update the pads. I only have a problem regarding the security of it.

In order for odoo to be able to do that, i had to use the following settings to etherpad:
/* Users must have a session to access pads. This effectively allows only group pads to be accessed. */
"requireSession" : false,

/* Users may edit pads but not create new ones. Pad creation is only via the API. This applies both to group pads and regular pads. */
"editOnly" : true,
It looks like i have to disable "requiresession" because otherwise odoo cannot connect to my server. The problem is that, this way, anyone that knows the name of an etherpad will be able to update it from the web interface without even logging in, which could be a security problem.
So my questions are simple:
- how can i allow odoo to read, update and create notes in etherpad, and block people from using the web interface without logging in?
Thank you!
Avatar
Discard