How to restrict portal access records

Question

I am running Odoo17 Enterprise on-premise (not on .sh).
I want to restrict access for portal users to only see their own records and not be able to see the records of other users that are connected to their company (similar to how it works in contacts in the backend). I assume that this would be done in record rules?

J.A. Daniel Göppner · Accepted Answer

Hi
yes that is done by record rules but needs intensive and clean testing
warm regards
Daniel

ITANDWEBSUPPORT LTD · Answer

Anyone know where to start on the syntax for this?
I have changed Portal Personal Quotations/Sales Orders rule from the preset rule (for some reason I cannot post that because i can't seem to post more than one rule) to:

[('message_partner_ids', 'in', [ user.partner_id.id [1] ])]
It seems to work but It would be good to get some feedback on this to make sure that I'm not making any rookie mistakes that may lead to a disaster.

[1] http://user.partner_id.id

Related Posts	Replies	Zobrazenia
Odoo15 Show Quotes, Sales Order, Invoices for all companies for a portal user record_rules multicompany portal-user	1 jan 24	2075
How to Enable Portal Users to Reopen Their Own Tickets in Odoo 17EE? stages helpdesk portal-user odoo17EE	1 dec 24	1964
How to create or expose a CRM portal view so that portal users can access and view CRM records (leads/opportunities) securely, just like they can view sales or invoices? record_rules controllers developperguide crm_lead portal-user	2 okt 25	382
why xpath not worked in priority views? odoo17EE	1 nov 24	1747
why xpath not worked in priority views? odoo17EE	0 nov 24	15

This question has been flagged

Enjoying the discussion? Don't just read, join in!