Public release from ruodoo-project: 19.0 - 2026-05-10 21:19:01 UTC

access_restricted/doc/index.rst

@@ -0,0 +1,37 @@
+==================================
+ Restricted administration rights
+==================================
+
+Installation
+============
+
+* `Install <https://odoo-development.readthedocs.io/en/latest/odoo/usage/install-module.html>`__ this module in a usual way
+
+Configuration
+=============
+
+
+* `Log in as SUPERUSER <https://odoo-development.readthedocs.io/en/latest/odoo/usage/login-as-superuser.html>`__
+* Navigate to menu ``[[ Settings  ]] >> Users & Companies >> Users``
+* In ``Access Rights`` tab you can select *Allow add implied groups from settings*:
+  it allows a user to configure groups via ``group_XXX`` fields from ``Settings`` menu.
+
+Usage
+=====
+
+By default all users except a superuser restricted to escalate the privileges.
+
+Let's take ``Sales (sale_management)`` module as an example.
+
+Without this module installed:
+
+* Say you have a user with administration rights ``Administration: Access Rights``. This user thus may increase his own rights in ``Application Accesses`` from ``Sales: User: Own Documents Only``
+  to ``Sales: Administrator``. Also he can open menu ``[[ Sales ]] >> Configuration >> Settings`` and select ``Customer Addresses`` there
+  and then click ``[Apply]`` button (adding ``group_sale_delivery_address``)
+
+With this module installed:
+
+* The user from previous example cannot increase his privileges. There is no ``Sales: Manager`` option for him, and also no ``Customer Addresses``
+  option in module configuration
+* The only exception is done for users who are in special group *Allow add implied groups from settings*: if your user is included in this group by the superuser then you may select
+  ``Customer Addresses`` from ``Sale`` module ``Configuration >> Settings`` menu