Odoo is the world's easiest all-in-one management software. It includes hundreds of business apps:
CRM | e-Commerce | Accounting | Inventory | PoS | Project management | MRP | etc.
I'm in a process of evaluating Odoo (8) for a client.
The installation went well but when the time came to provide an access to Odoo to the client testers, I saw the "Manage databases" button under the login box. Is it a mistake or there is a way to remove this from the login page and also prevent a non-admin user from accessing the databases administration page ? It is so unusual that I'm sudenly concern about the security of Odoo (waht about other things that I don't see).
In regards to your questions you can create a module that inherits the login form and simply remove the database dropdown menu as an option. This is a very simple module and I have already implemented this functionality in a website theme module that i'm using in production now.
In regards to restricting access to the /web/database/selector and /web/database/manager pages there are a few options. You could try the following module that redirects from /web/database/manager to the website login for those without access rights to see the /web/database/manager page:
or you could set up Nginx as a reverse proxy in front of Odoo and simply use Nginx rules to restrict access to those pages to certain fixed IP addresses by using the example i've provided in the following forum post:
Feel free to post back if you have any questions.
@Luke: Thanks for the tips. I will try that.
@Ray, @Juan: !!! If I well understand, it's a little bit like a lottery ? It's like saying: "I will give you my bank accounts list. Try to get in now. I'm sure that you won't be able to do anything with it..."
Maybe it's just me, but I think it is against one of the basic rules in security: don't challenge hackers!
About This Community
This platform is for beginners and experts willing to share their Odoo knowledge. It's not a forum to discuss ideas, but a knowledge base of questions and their answers.Register
Odoo Training Center
Access to our E-learning platform and experience all Odoo Apps through learning videos, exercises and Quizz.Test it now
|Asked: 11/24/14, 4:51 PM|
|Seen: 5756 times|
|Last updated: 3/16/15, 8:10 AM|