How can I change the cookie validity date for the Odoo session? It is a security risk. We have to reduce it. Thanks
Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:
- CRM
- e-Commerce
- Akuntansi
- Inventaris
- PoS
- Project
- MRP
Pertanyaan ini telah diberikan tanda
by default odoo. set 90 days validity for session_id and it's incremental if you ever access odoo within 90 days it will extend its validity from access day/date
you can change validity from here
https://github.com/odoo/odoo/blob/13.0/odoo/http.py#L1400 => 90 days = 90 * 24 * 60 * 60 seconds
It's not a security risk as far as your physical device secure and no one can steal your session_id from your browser
Note: odoo don't track all the login devices so in case of a stolen physical device you can not log out from that device.
Hi Ravi, Thanks for your answer.
We are using the MS Active Directory (AD) password verification and our security concern is because we do not see Odoo to be querying AD every time a user logs in.
How often is the password verified against AD?
What happens if a session is open in Odoo for many days (because the session is still valid in the cookies) and the user is blocked or deleted from AD?
Menikmati diskusi? Jangan hanya membaca, ikuti!
Buat akun sekarang untuk menikmati fitur eksklufi dan agar terlibat dengan komunitas kami!
DaftarPost Terkait | Replies | Tampilan | Aktivitas | |
---|---|---|---|---|
|
0
Mar 15
|
6798 | ||
|
0
Mei 25
|
1142 | ||
|
1
Agu 19
|
5476 | ||
|
0
Nov 15
|
5707 | ||
|
0
Des 21
|
3024 |