Skip ke Konten
Pertanyaan ini telah diberikan tanda
securitydocumentationaccountprivacyopenerp.com
2 Replies
6630 Tampilan
Avatar
FRACHT FWO CZECH

Hi, I would like to know which kind of data is exchanged between a local openerp 7 instance and openerp.com. In the default install I see the "my openerp.com account" menu item - when I click it, I am redirected to openerp.com and there I can see the name of the database I just installed - I did not investigate if this happens via javascript or whatever, but I never agreed to send any data to openerp.com from the local install, not even the name of the local database.

This makes me kind of unsafe - which data is exchanged between my local instance and openerp.com? Is there any way, to control this (on applicatin level)? I would like to read detailed information about this, so we can better understand, if there will be still enough space between our customer data and the cloud, if we start using OE7... also I would like to know if there is any inbuilt remote access or data transfer feature and if yes, how to unwire this (besides using openerp in a private network only).

Thank you very much for your attention!

Avatar
Buang
Avatar
patrick
Jawaban Terbai

As far as I know, the local installation does try to get some information from the servers of OE, in order to show you the various apps you can install. If some of them have been updated since last time, when you go to Settings -> Apply Scheduled Updates, it will show a popup to ask you permission to update the system.

You should be able to find all instances where it does a callback, if you look through the code (which is distributed with the installation).

Avatar
Buang
FRACHT FWO CZECH
Penulis

thanks, yes of course I can just grep the source - however it would be interesting to read what kind of policy does exist regarding client data on local OE7 instances. I do not suspect to find anythig evil here, but I need a clear statement about this that I can forward to management and customers. I did not find anything about this - would be helpful to open the doors into companies that are still trying to keep the walls between internal and external services as high as possible. Yes, privacy aware companies do still exist, even in times of prism cloud. :)

Avatar
Peter Nietz
Jawaban Terbai

I have the same problem here. I think it is still in the policies of Odoo and resellers that the server phones home.

I would recommend to check out the openerp community backports at https://github.com/OCA/OCB

If you need help installing from ocb just comment or pm me so I can post a complete "howto install ocb8 on ubuntu".

There is also an app you can install which should prevent phoning home: https://bitbucket.org/BizzAppDev/oerp_no_phoning_home

For more infos check this thread: https://www.odoo.com/forum/help-1/question/install-community-with-one-click-54562

Avatar
Buang
Post Terkait Replies Tampilan Aktivitas
[Fail security v12] For the fight against the falsification of identity
security mail create account
Avatar
0
Feb 19
3054
How to bypass record rules for specific model? Diselesaikan
security account record_rules intercompany odooV8
Avatar
Avatar
Avatar
2
Mei 22
11025
Mac Id restriction for Users in Odoo enterprise
security
Avatar
0
Des 25
166
what is the differance between access right and record rules in odoo ? Diselesaikan
security
Avatar
Avatar
Avatar
Avatar
Avatar
5
Sep 25
15921
User Session Bug.
security
Avatar
0
Jun 25
1152