mirror of
https://github.com/bringout/oca-technical.git
synced 2026-04-18 17:12:00 +02:00
42 lines
1.2 KiB
Markdown
42 lines
1.2 KiB
Markdown
# Security
|
|
|
|
Access control and security definitions in base_substate.
|
|
|
|
## Access Control Lists (ACLs)
|
|
|
|
Model access permissions defined in:
|
|
- **[ir.model.access.csv](../base_substate/security/ir.model.access.csv)**
|
|
- 6 model access rules
|
|
|
|
## Record Rules
|
|
|
|
Row-level security rules defined in:
|
|
|
|
## Security Groups & Configuration
|
|
|
|
Security groups and permissions defined in:
|
|
- **[base_substate_security.xml](../base_substate/security/base_substate_security.xml)**
|
|
- 1 security groups defined
|
|
|
|
```mermaid
|
|
graph TB
|
|
subgraph "Security Layers"
|
|
A[Users] --> B[Groups]
|
|
B --> C[Access Control Lists]
|
|
C --> D[Models]
|
|
B --> E[Record Rules]
|
|
E --> F[Individual Records]
|
|
end
|
|
```
|
|
|
|
Security files overview:
|
|
- **[base_substate_security.xml](../base_substate/security/base_substate_security.xml)**
|
|
- Security groups, categories, and XML-based rules
|
|
- **[ir.model.access.csv](../base_substate/security/ir.model.access.csv)**
|
|
- Model access permissions (CRUD rights)
|
|
|
|
Notes
|
|
- Access Control Lists define which groups can access which models
|
|
- Record Rules provide row-level security (filter records by user/group)
|
|
- Security groups organize users and define permission sets
|
|
- All security is enforced at the ORM level by Odoo
|