mirror of
https://github.com/bringout/oca-ocb-core.git
synced 2026-04-19 11:31:59 +02:00
21 lines
558 B
Markdown
21 lines
558 B
Markdown
# Security Model
|
|
|
|
## Access Rights
|
|
- `ir.model.access`: per-model CRUD access per group.
|
|
- Default entries for base models, extended by modules.
|
|
|
|
## Record Rules
|
|
- Domain-based filtering of accessible records.
|
|
- Multi-company isolation rules in base.
|
|
|
|
## Groups
|
|
- `res.groups` organized by application category.
|
|
- Inheritance via `implied_ids`.
|
|
|
|
## Sudo & Superuser
|
|
- `sudo()` to bypass rules for system operations.
|
|
- User ID `1` is superuser.
|
|
|
|
## Portal / Public
|
|
- `public` user for anonymous access.
|
|
- `portal` group for shared documents and portal pages.
|