Skip to Content
You need to be registered to interact with the community.
All Posts People Badges
Ključne besede (View all)
odoo accounting v14 pos v15
About this forum
This question has been flagged
access rightsOdoo12.0
5 Odgovori
16518 Prikazi
Avatar
Stefano Bazzi

On Odoo 12 is possible to create a user  and assign to it the "Access rights" group. As pointed also in https://www.odoo.com/it_IT/forum/help-1/question/administration-settings-and-access-rights-7270 this user is now able to create another user with "Settings" group, and feels a little bit strange due to the fact that a user with "Settings" can manage the whole system including install or remove application and change system settings while a user with "Access Rights" group cannot, but actually has the possibility to create a user with "Settings" group who is actually a superuser.
How prevent user with "Access Rights" group to create user with "Settings" group?

Avatar
Opusti
Avatar
Paresh Wagh
Best Answer

Hi Stefano:

One way to do this would be to do the following:

  • Ensure that the user with Administration / Access Rights does not have Extra Rights / Technical Features privileges. This will prevent the user from using the Settings > Users & Companies > Groups menu item to add a user directly to a security group.

  • Customize the "Users" form and make the Administration field accessible only to users in the Administration / Settings group by adding a groups="base.group_system" attribute to the field.

Avatar
Opusti
Avatar
Irina Hasenöhrl
Best Answer

Hello,
I am using Odoo 14 Community Edition.
Can someone show me, please
where I can find the Administration / Settings to add groups = "base.group_system"?
Many Thanks

Avatar
Opusti
Avatar
Rajeev kumar
Best Answer

Earlier, I had tried to do it myself, but that was too technical and time-consuming for me. 

But after some research, I found this module on Odoo app store. Here is the link

https://apps.odoo.com/apps/modules/16.0/restrict_access_right_user

Hope it helps.

Avatar
Opusti
Avatar
Chris TRINGHAM
Best Answer

I don't think it is possible (as standard).

You are right that once you grant a user access to Administration (either of the two user access groups) you are giving them the ability to manage both Settings and User Access.

In a typical Odoo implementation this is probably OK, because you wouldn't have two separate people needing access to settings and user access.  Do you have a requirement to set it up that way?

Avatar
Opusti
Avatar
Stefano Bazzi
Avtor Best Answer

The method proposed from Paresh worked nice, thanks!

I also needed a couple of additional steps, because after this the user with "Access Rights" group is still able to clone/edit an user with "Settings" group, so:

  • added a record rule for the group "Access rights" to prevent edit all the users except administrator.

  • added a record rule for the group "Settings" to give the possibility to edit user adminstrator.

Avatar
Opusti
Cyril

I don't think adding record rules will do the job because as long as the group "Access Rights" can edit record rules, it can modify all the security

Related Posts Odgovori Prikazi Aktivnost
Custom Dashboard using js
Odoo12.0
Avatar
Avatar
1
apr. 25
4569
How to Limit Pos Category in Odoo 12 Shop?
Odoo12.0
Avatar
0
mar. 24
1902
Why is the product_id initiated by default_product_id is NOT available during saving.
Odoo12.0
Avatar
0
okt. 22
3070
compare the lines in one2many fields
Odoo12.0
Avatar
0
sep. 22
2360
Tabula python library File not found in odoo 12
Odoo12.0
Avatar
Avatar
1
jul. 22
6169