How to prevent developers from having access to my Data in the database

Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

CRM
e-Commerce
Księgowość
Zapasy
PoS
Project
MRP

All apps

Wszystkie posty Osoby Odznaki

Tagi (Zobacz wszystko)

odoo accounting v14 pos v15

O tym forum

Pomoc

How to prevent developers from having access to my Data in the database

security development access

2 Odpowiedzi

4420 Widoki

uu3

HI, Im planing to implement odoo in my company. Im planing to hire a local company to do some custom modules and implement everything for us (that's what they've been doing for 10+ years).

My question is, how do I make sure my data will be safe? In other words developers wont sell, dump, or steal my data?

Does odoo have different layers? for an example, developers just have access to the code base layer and dummy data not the actual data? Im new to this please guide me on this. I can remove their access once we are up and running but what if they want to do bug fixes etc in a few months time? How do other medium size companies tackle this safety and security issue?

Im paranoid about this because similar cases have happened that I know of (not related to this system) so I want to make sure my data, companies data, customers data is safe as this system is going to be the central location for all the data.

Also how safe is DigitalOcean databases? Do you think Amazon is safer or they are the same in terms of security and backups?

Thanks heaps.

Chris TRINGHAM

This is an interesting question. I have previously worked in large corporations where there are policies on developer's access to production databases (this was with other ERP systems). It's not so easy to setup and definitely makes life more difficult. In my opinion, Odoo isn't designed to be used in this type of environment but it may be possible to solve these problems.

dygytally.de GmbH

Did you check the Odoo.sh platform? There, for example, you can grant access to only the development branches. Use standard test data (provided by odoo database itself) and your own test data according to your custom modules.

Give permission to a project manager to deploy tested modules to staging and production environments.

If you host elsewhere you could also provide development environments for developers. Give access to staging (also called sandboxes) and production to people you trust more.

Your question has to be answered by any project with sensitive data. And it is not easy to be solved as the right set of test data is crucial.

Finally, you have to find a person you have confidence in.

Podoba Ci się ta dyskusja? Dołącz do niej!

Stwórz konto dzisiaj, aby cieszyć się ekskluzywnymi funkcjami i wchodzić w interakcje z naszą wspaniałą społecznością!

Zarejestruj się

Powiązane posty	Odpowiedzi	Widoki
can't access my module data in odoo 17 via GET method in postman Rozwiązane security access	2 sie 24	1837
How do I hide the Procurements Tab in Product Template for Sales Users? Rozwiązane security access	1 lis 15	4840
How to configure field permission for 2 groups? Rozwiązane security access Development	2 lut 24	1181
How to restrict user from accessing views by changing the action id,menu id in the url security access Odoo12.0	1 paź 23	7615
Struggling with ir.model.access.csv Rozwiązane security group access	2 wrz 21	10330

To pytanie dostało ostrzeżenie

Podoba Ci się ta dyskusja? Dołącz do niej!