oca-ocb-security/odoo-bringout-oca-ocb-auth_totp_mail_enforce/doc/SECURITY.md
2025-08-29 15:20:51 +02:00

34 lines
948 B
Markdown

# Security
Access control and security definitions in auth_totp_mail_enforce.
## Access Control Lists (ACLs)
Model access permissions defined in:
- **[ir.model.access.csv](../auth_totp_mail_enforce/security/ir.model.access.csv)**
- 1 model access rules
## Record Rules
Row-level security rules defined in:
```mermaid
graph TB
subgraph "Security Layers"
A[Users] --> B[Groups]
B --> C[Access Control Lists]
C --> D[Models]
B --> E[Record Rules]
E --> F[Individual Records]
end
```
Security files overview:
- **[ir.model.access.csv](../auth_totp_mail_enforce/security/ir.model.access.csv)**
- Model access permissions (CRUD rights)
Notes
- Access Control Lists define which groups can access which models
- Record Rules provide row-level security (filter records by user/group)
- Security groups organize users and define permission sets
- All security is enforced at the ORM level by Odoo