跳至内容
菜单
此问题已终结
2 回复
184 查看

I have installed Odoo 15 Community on my server, but I have a problem with access rights management, meaning that a person who is supposed to manage the cash register should only be able to make payments on customer invoices but should not be able to create customer invoices, that is, they should not be able to create invoices.

My question is how to manage these access rights to address these issues.

Thank you in advance !

形象
丢弃
编写者 最佳答案

Ah, really, honestly, it truly touches my heart, dear, that you take the time to provide me with all these clear and precise explanations; it really means a lot to me. Thank you very much, in reality.

Furthermore, I would like to understand how to limit the views of menus, submenus, buttons, and options based on the given access rights.

形象
丢弃
最佳答案

Hi,


In Odoo 15 Community, you want cashiers to be able to register payments on customer invoices but not to create invoices. By default, Odoo does not provide such a restricted role. The standard Billing group allows both creating invoices and recording payments, while the Accountant group has full access to all accounting features. This means you need to adjust access rights to enforce the restriction.


The first way to handle this is by modifying the access rights of the existing Billing group. You can activate Developer Mode and navigate to Settings → Technical → Security → Access Control Lists (ACLs). There, you locate the model account.move, which is used for invoices and journal entries. For the Billing group (or whichever group your cashiers belong to), you can remove the Create permission while keeping Read and Write enabled. This ensures that cashiers can still view invoices and register payments, but they will no longer be able to create new invoices.


A cleaner solution is to create a dedicated Cashier group. You can duplicate the existing Billing group, rename it “Cashier,” and then remove the Create access for invoices (account.move). This allows you to assign the new role specifically to cashier users. Meanwhile, the Billing group can remain for users who need to create invoices, and the Accountant group retains full accounting access. This approach gives you a clear separation of responsibilities: cashiers handle payments, billing staff handle invoices, and accountants manage the full set of financial operations.


With this setup, cashiers can open invoices and record payments without having the ability to issue invoices themselves. The system remains secure, user-friendly, and aligned with the principle of separation of duties in financial management.


For more information,


* https://www.youtube.com/watch?v=m22CrOCzqMI

* https://www.youtube.com/watch?v=69kiN2FZ3ag

* https://www.cybrosys.com/blog/how-to-set-access-rights-in-odoo-17-accounting

* https://www.odoo.com/documentation/18.0/applications/general/users/access_rights.html


Hope it helps.

形象
丢弃
相关帖文 回复 查看 活动
1
8月 25
70
1
8月 25
171
0
8月 25
83
1
8月 25
130
1
8月 25
637