This question has been flagged
10 Replies
33700 Views

Can we give permission for a group for editing only a single field in that model? None of the other fields shouldn't be edited..

Avatar
Discard
Best Answer

Hi Shelton,

You can give permission for a group for editing only single field of model by defining :

<field name="Field_Name" groups="Group_Name">

Like that your group user can edit only Field_Name field which have access right.

Thank You, (SerpentCS Pvt. Ltd.)

Avatar
Discard

This not practical. groups attribute completely blocks access to field (both read and write) for other groups. The poster want to allow certain groups to view all fields but only edit one field.

Best Answer

You can try

'field1': fields.float(string='Field',write=['base.GROUP_ID']),

Only user belongs to GROUP_ID can change that field..

Regards, Mustufa Rangwala

Avatar
Discard

Are sure write is a field attribute!!! I could not find any reference to this attribute in source code.

Hi Mohammad, Yes I am sure it is working with OpenERP 6.1 tested. The feature is like user who is not having that group can see that field but can not edit. If he/she try to edit OpenERP will remove that edit (does not save in to database..) ..

No, There is no specific document related to this...

Hello Mustufa, write only Permissions its working fine. Is there any way to show message to the End user for example other user try to modify field its shows "Sorry, you are not allowed to change this Field Data" Thanks

Best Answer

As I understand, you want to allow writing only to one field. Check this answer for information on how to control field access.

I think your best option is to use fields.property type for that field and create a record rule to control the access to the property and access rule to block writing to the main record.

Another option is to override create() and write() methods to check the group and access fields upon writing.

Check this answer for general information about access control.

Avatar
Discard
Best Answer

Even if it was working, it would affect the view only, not an actual security measure. Do you have any reference to this option in documentation or source?

Avatar
Discard
Best Answer

Check field access in http://odoo-80.readthedocs.org/en/latest/reference/security.html

You can use groups attr in field.

Avatar
Discard