Community mailing list archives

Re: Odoo vs SAP for data security

OpenGLOBE, Grzegorz Grzelak
- 09/24/2015 14:22:53
We will never kill SAP if don't have security settings on field level. 
We have only reliable security on table level and record level. We 
cannot in Odoo exclude field access if user have table or record access. 
Even if we take out the visibility of the field in view, the user can 
see the field using export, if we take out the export right the user can 
see the field using XML-RPC which cannot be blocked.

Odoo has security on table level, and on record level. When Odoo eill 
have security on field level it can be compared to SAP.

All the best
Grzegorz Grzelak

On 2015-09-24 19:45, Kitti U. wrote:

> Dear community,
> We got an opportunity to kill SAP completely with Odoo (Yes!!!) in one 
> big organization.
> Through implementation, we think Odoo can replace, and in many area 
> better and more flexible than SAP. But there are one thing that our 
> customer says SAP could do and Odoo can not, and it is also a big 
> concern.
> It is about security access to database. SAP claim that, no one can 
> access its database and update any number directly. And even there is 
> rights in database, SAP structure in the way it is very complex to 
> understand. All update will be done through SAP only. (is it true?)
> While Odoo, as we know, the door is quite open.
> Anyone have that experiences, and can share with us how we could make 
> Odoo being more secured like what SAP. May be through the combination 
> of technique in database or API levels or anything.
> Thanks for your advice.
> Kitti
> --
> Mobile: +66-(0)8-1841-7480
> Your ERP Partner => [1]
> _______________________________________________
> Mailing-List:
> Post to:
> Unsubscribe: