Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

CRM
e-Commerce
Comptabilité
Inventaire
PoS
Projet
MRP

All apps

Toutes les publications Personnes Badges

Étiquettes (Voir toutl)

odoo accounting v14 pos v15

À propos de ce forum

Aide

How to prevent developers from having access to my Data in the database

security development access

2 Réponses

5428 Vues

uu3

HI, Im planing to implement odoo in my company. Im planing to hire a local company to do some custom modules and implement everything for us (that's what they've been doing for 10+ years).

My question is, how do I make sure my data will be safe? In other words developers wont sell, dump, or steal my data?

Does odoo have different layers? for an example, developers just have access to the code base layer and dummy data not the actual data? Im new to this please guide me on this. I can remove their access once we are up and running but what if they want to do bug fixes etc in a few months time? How do other medium size companies tackle this safety and security issue?

Im paranoid about this because similar cases have happened that I know of (not related to this system) so I want to make sure my data, companies data, customers data is safe as this system is going to be the central location for all the data.

Also how safe is DigitalOcean databases? Do you think Amazon is safer or they are the same in terms of security and backups?

Thanks heaps.

Chris TRINGHAM

This is an interesting question. I have previously worked in large corporations where there are policies on developer's access to production databases (this was with other ERP systems). It's not so easy to setup and definitely makes life more difficult. In my opinion, Odoo isn't designed to be used in this type of environment but it may be possible to solve these problems.

dygytally.de GmbH

Did you check the Odoo.sh platform? There, for example, you can grant access to only the development branches. Use standard test data (provided by odoo database itself) and your own test data according to your custom modules.

Give permission to a project manager to deploy tested modules to staging and production environments.

If you host elsewhere you could also provide development environments for developers. Give access to staging (also called sandboxes) and production to people you trust more.

Your question has to be answered by any project with sensitive data. And it is not easy to be solved as the right set of test data is crucial.

Finally, you have to find a person you have confidence in.

Vous appréciez la discussion ? Ne vous contentez pas de lire, rejoignez-nous !

Créez un compte dès aujourd'hui pour profiter de fonctionnalités exclusives et échanger avec notre formidable communauté !

S'inscrire

Publications associées	Réponses	Vues
can't access my module data in odoo 17 via GET method in postman Résolu security access	2 août 24	3041
How do I hide the Procurements Tab in Product Template for Sales Users? Résolu security access	1 nov. 15	5597
What’s the best architecture to manage multi-tenant Odoo setup with white-label support? security development configuration	0 oct. 25	505
How to configure field permission for 2 groups? Résolu security access Development	2 févr. 24	1181
How to restrict user from accessing views by changing the action id,menu id in the url security access Odoo12.0	1 sept. 25	8750

Cette question a été signalée

Vous appréciez la discussion ? Ne vous contentez pas de lire, rejoignez-nous !