Community mailing list archives


Re: Odoo vs SAP for data security

VentorTech, Eva Pinter
- 09/25/2015 03:34:48
Hi Kitty,

It is not impossible to create database tables in SAP using Oracle. Nobody does it because of the risk of doing so. Moreover, SAP has great tools that allow you to create a table and also to generate the transactions and all related screens without one line of code. All tools are quite well developed so that there is no reason for anyone to work directly in the database.

Related to the security, SAP has also worked quite a lot on that and it takes between 2-4 weeks to set-up the authorisation for a middle sized company and you can block almost everything. A little bit of social engineering would not help as it does not allow to access further than the authorised objects of the specific person. You really have to go to the administrators and even they have multiple users with different authorisations in the production system that makes it extremely difficult to figure out which admin has the full rights.

The last element is that almost EVERYTHING in SAP ERP is logged.

All these elements make the customer feel quite secure, once they have set-up SAP properly.

p.s.: I also never heard about a company SAP system being hacked, at least not in the last years (we used to be able to change things using special commands, but that is now so well known that it’s automatically blocked)


Best Regards,
Eva Pinter

Sales and Marketing Director, XPANSA Logistics | ERP, BI, E-commerce, Data Mining and DMS consulting
Xpansa CLOUD | Full Business IT Infrastructure |
mERP | Odoo Android App |

/// site  :
/// mail  :
/// phone, IE : +44 (0)7596 40 30 99
/// skype : epinter

On 25 Sep 2015, at 08:18, Kitti U. <> wrote:


Thanks a lot for sharing opinions. Just want to add the reply to Eva questions, right from customer.
  • SAP ECC 6.0
  • Database Oracle version 11G
  • New table is created through SAP application, and not directly
  • Never update directly to table because there are multiple linkages, which make it impossible, everything must be done through SAP.
Frankly, I think customer also don't have much idea what sap is doing, as everything is closed. They just know it is hard to access (but interpret that it is a security excellence of SAP).

Can I summarize that it is more on how SAP block access to DB, there is no real magic?

This project is a thrill for our team. Customer knows well how SAP compare to Odoo, they used Odoo for small apps for years, and we replace SD module with Odoo. So far, they love Odoo. Now, they are also taking big challenge to replace everything.

Customer was suffering from the rigidity of SAP, and lately suffer from SAP aggressively chase for more License Fee. I am not sure why SAP choose to this strategy, as it seem to happen to many customers that used SAP for many years. It turn to be Odoo's opportunity.

Wondering if the same trend happen to your home country??? That the big customer wanted to let go SAP.

Does any of you have experiences replacing SAP ERP (not Business One) with Odoo? Any challenge you faces? Any thing we should beware of? Any shared experiences?

Appreciate all your answer,
Kitti U.

On Fri, Sep 25, 2015 at 12:36 PM, Nhomar Hernández <> wrote:

2015-09-25 0:21 GMT-05:00 Raymond Leung <>:
on who has the right to access data internally, not the database breakpoint or how strong is it on protection. 


Saludos Cordiales

CEO at Vauxoo Odoo's Gold Partner.
Nhomar Hernandez

Post to:

Mobile: +66-(0)8-1841-7480
Your ERP Partner =>

Post to: