<a class="reference external image-reference" href="http://www.gnu.org/licenses/lgpl.html"><img alt="License: LGPL-3" src="https://img.shields.io/badge/license-LGPL--3-blue.svg"> </a> <a name="access-restriction"></a> <h2>Access restriction</h2> <p>This module add a layer of security for CRUD operations. You can allow some security groups to execute some CRUD action on specific models. Users who aren't into these groups will have an Access Denied error message.</p> <p>Others security rules (ir.model.access and ir.rule) are not bypassed. So first, the system will check standard security access and then (if the access is allowed), check on access.restriction are executed.</p> <a name="configuration"></a> <h3>Configuration</h3> <p>Configure Access restrictions in Settings =&gt; Security =&gt; Access restriction</p> <a name="example"></a> <h3>Example</h3> <p>Into the configuration, add this new Access restriction: - Model: product.product - Name: Test product product - Read: True - Create: False - Write: False - Unlink: False - Groups: A fictive 'Product Manager' group</p> <p>If a user try to read a product.product (via form view for example), an error message will appears for the user (if he is not into the group). This error message will appears also if you're into a sale.order view (for example).</p> <p>If you add the user into this 'Product Manager' group, the user will be able to display product.product.</p> <p>As other security access are not ignored, if the user is into the 'Product Manager' group, other security check can constrain the user to do an action.</p> <a name="bug-tracker"></a> <h3>Bug Tracker</h3> <p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-tools/issues">GitHub Issues</a>. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us smash it by providing detailed and welcomed feedback.</p> <a name="credits"></a> <h3>Credits</h3> <a name="contributors"></a> <h4>Contributors</h4> <ul class="simple"> <li>François Honoré &lt;<a class="reference external" href="mailto:francois.honore&#64;acsone.eu">francois.honore&#64;acsone.eu</a>&gt;</li> </ul> <a name="maintainer"></a> <h4>Maintainer</h4> <a class="reference external image-reference" href="https://odoo-community.org"><img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" /></a> <p>This module is maintained by the OCA.</p> <p>OCA, or the Odoo Community Association, is a nonprofit organization whose mission is to support the collaborative development of Odoo features and promote its widespread use.</p> <p>To contribute to this module, please visit <a class="reference external" href="https://odoo-community.org">https://odoo-community.org</a>.</p>