Under Odoo's Hood: Secrets of an unbreakable permissions architecture
summary
An overview of how Odoo implements a robust permission architecture, explaining the technologies and design choices that make its access-control model resilient. Covers Odoo-specific components such as its ORM, record rules, groups, access control lists (ACLs) and how they interact to enforce permissions across modules and views.
AI-written summary · about
chapters (7)
- 0:00Odoo introduction
- 2:50Access rights basics
- 11:10Group and privilege creation
- 18:36ACL for models
- 25:32Record rules fine-tuning
- 36:32View and menu restrictions
- 43:15New features and conclusion
related talks
29mReduce Your Perms. Mgmt. Time While Protecting Your Users
14mBuilding Permissions into Data Modeling
22mREST Easy — API Security Done Right
32m"Our quest for ACL improvements in TYPO3 Core"
49mFine Grained Authorisation with Relationship-Based Access Control
15mDjango URL Pattern Role Authorization System
28mMaking of the Ory Permissions Language
16mAccess Granted with AuthZed