oca-product/odoo-bringout-oca-product-configurator-product_configurator/doc/SECURITY.md

Security

Access control and security definitions in product_configurator.

Access Control Lists (ACLs)

Model access permissions defined in:

• ir.model.access.csv
  • 39 model access rules

Record Rules

Row-level security rules defined in:

Security Groups & Configuration

Security groups and permissions defined in:

• configurator_security.xml
  • 3 security groups defined

graph TB
    subgraph "Security Layers"
        A[Users] --> B[Groups]
        B --> C[Access Control Lists]
        C --> D[Models]
        B --> E[Record Rules]
        E --> F[Individual Records]
    end

Security files overview:

• configurator_security.xml
  • Security groups, categories, and XML-based rules
• ir.model.access.csv
  • Model access permissions (CRUD rights)

Notes

• Access Control Lists define which groups can access which models
• Record Rules provide row-level security (filter records by user/group)
• Security groups organize users and define permission sets
• All security is enforced at the ORM level by Odoo