Skip to Content
This question has been flagged
securityloggingbackuprestoreadministrator
1 Reply
1642 Views
Avatar
info@esssrl.it

Backups and Restore at :


https://:8069/web/database/manager

Open form without request of login.

Is available to all user connect info Intranet Lan of company.

The information store inside to SQL postgres engine is uplodable for all user.

All field password with EYE on right is allow to view password of access to engine

All User is available to change password of Engine SQL.


This status is problem of compromise security of data, violation of sensitive data of company and connect problem with inappropiate access from not autorize administrator rules.


Is available specific tecnical setup or flag for allow access only to loged user with administrator credential ? 


Thank for all


Avatar
Discard
Avatar
Niyas Raphy (Walnut Software Solutions)
Best Answer

Hi,

By default the /web/database/manager page is protected by master password. Not sure about the version that you are using, in the latest version, the master will be enforced to set, but if you are using an older version, you can make sure that, you have configured the master password for your odoo instance.

Once the master password is configured for the odoo instance, for all the database operations, like restore, create, delete and back up, this password will be asked.


If you see any security issue, with this implementation, you can report it to: security@odoo.com


If you don't need to expose this page, you can set list_db=False in your odoo configuration file, so that it wont be accessible to any users. 

If you need to allow to only for specific users, you can remove list_db=False from configuration file and adjust it from the nginx file as per your need, based on IP.


Thanks

Avatar
Discard
Related Posts Replies Views Activity
How to Restore Odoo Online Database? Solved
backup restore
Avatar
Avatar
Avatar
Avatar
3
Jul 24
6827
Disable 2FA for other users as Administrator Solved
security administrator
Avatar
Avatar
Avatar
2
Dec 21
6807
Backup procedure for Odoo 14 CE Solved
backup restore
Avatar
Avatar
1
May 21
3939
backup in linux and shift to windows
backup restore
Avatar
Avatar
1
Mar 24
6145
Can you tell me how we do a complete backup and restore in odoo ?
backup restore
Avatar
Avatar
Avatar
3
Aug 16
4370