Skip to Content
This question has been flagged
3 Replies
426 Views
Avatar
Danny Go

Hello,

I am using the latest Odoo 18 version for project and timesheet management. 

I am engaging contractors to work on individual projects and to record their times using the timesheet. I want these contractors to only be able to see their assigned projects and times. I also do not want the contractors to be able to create new projects or to edit their assigned projects. 


I am looking for help on what Domain Filter record rules I need to write and what groups need to be setup and the ACL settings. 


I was given the following code to use in the project.project and account.analytic.account model -


[('user_id', '=', user.id)]


However, it is not working. Furthermore, there is no user_id field in account.analytic.account. I was then told use the account.analytic.line model but it is still not working. 


My contractors can still see other contractors' projects and timesheets.


Any help would be appreciated.


Note: I am on the One App Free plan.



Avatar
Discard
Avatar
Cybrosys Techno Solutions Pvt.Ltd
Best Answer

Hi,

    1. Create a Contractor User Group:

- Create a new group named Contractors (technical name: group_project_contractor).

- Make it inherit from Project User (project.group_project_user) so users can access timesheets but not configure projects.

    2. Set Access Control Lists (ACLs):

- For the model project.project → grant Read access only (no Create, Write, or Delete).

- For the model account.analytic.line → grant Read, Write, and Create access (no Delete).

    3. Define Record Rules:

- For project.project → use the domain: [('user_ids', 'in', [user.id])] to ensure contractors only see projects where they are added as members in the Allowed Users (Members) field.

- For account.analytic.line → use the domain: [('user_id', '=', user.id)] to ensure each contractor sees and manages only their own timesheet entries.

    4. Assign Contractors to Projects:

- Add each contractor to their assigned projects under the Members (Allowed Users) field.

    5. Restrict Permissions:

- Ensure contractors belong only to the Contractors group (not Project Manager or higher).

    6. Result:

- Contractors can access only their assigned projects.

- They can log and view only their own timesheets.

- They cannot create, edit, or delete projects.

- They cannot view other contractors’ projects or timesheets.


Hope it helps.


Avatar
Discard
Avatar
D Enterprise
Best Answer

Hii,

after assign a project of user please make record rules 
Settings > Technical > Security > Record Rules
Model : project.project
Rule Name : as your Work
and set domain like 
[('user_id', 'in', [user.id)]


and also you can select group as per your requiement
i hope it is use full
here is pic of record rule

select access right as per you work

Avatar
Discard
Avatar
Banibro IT Solutions
Best Answer

For Projects:

  • Go to Settings > Users
  • Select a user
  • Under Access Rights, set:
    • Project: User
      • ❌ They can’t manage all projects
      • ✅ They can access only the projects they are assigned to

For Timesheets:

  • Under Access Rights, set:
    • Timesheets: Employee
      • ✅ They can log and view their own timesheets

Avatar
Discard