oca-report/odoo-bringout-oca-reporting-engine-base_comment_template/doc/SECURITY.md

Security

Access control and security definitions in base_comment_template.

Access Control Lists (ACLs)

Model access permissions defined in:

• ir.model.access.csv
  • 3 model access rules

Record Rules

Row-level security rules defined in:

Security Groups & Configuration

Security groups and permissions defined in:

• security.xml

graph TB
    subgraph "Security Layers"
        A[Users] --> B[Groups]
        B --> C[Access Control Lists]
        C --> D[Models]
        B --> E[Record Rules]
        E --> F[Individual Records]
    end

Security files overview:

• ir.model.access.csv
  • Model access permissions (CRUD rights)
• security.xml
  • Security groups, categories, and XML-based rules

Notes

• Access Control Lists define which groups can access which models
• Record Rules provide row-level security (filter records by user/group)
• Security groups organize users and define permission sets
• All security is enforced at the ORM level by Odoo