38 lines
1.7 KiB
ReStructuredText
38 lines
1.7 KiB
ReStructuredText
==================================
|
|
Restricted administration rights
|
|
==================================
|
|
|
|
Installation
|
|
============
|
|
|
|
* `Install <https://odoo-development.readthedocs.io/en/latest/odoo/usage/install-module.html>`__ this module in a usual way
|
|
|
|
Configuration
|
|
=============
|
|
|
|
|
|
* `Log in as SUPERUSER <https://odoo-development.readthedocs.io/en/latest/odoo/usage/login-as-superuser.html>`__
|
|
* Navigate to menu ``[[ Settings ]] >> Users & Companies >> Users``
|
|
* In ``Access Rights`` tab you can select *Allow add implied groups from settings*:
|
|
it allows a user to configure groups via ``group_XXX`` fields from ``Settings`` menu.
|
|
|
|
Usage
|
|
=====
|
|
|
|
By default all users except a superuser restricted to escalate the privileges.
|
|
|
|
Let's take ``Sales (sale_management)`` module as an example.
|
|
|
|
Without this module installed:
|
|
|
|
* Say you have a user with administration rights ``Administration: Access Rights``. This user thus may increase his own rights in ``Application Accesses`` from ``Sales: User: Own Documents Only``
|
|
to ``Sales: Administrator``. Also he can open menu ``[[ Sales ]] >> Configuration >> Settings`` and select ``Customer Addresses`` there
|
|
and then click ``[Apply]`` button (adding ``group_sale_delivery_address``)
|
|
|
|
With this module installed:
|
|
|
|
* The user from previous example cannot increase his privileges. There is no ``Sales: Manager`` option for him, and also no ``Customer Addresses``
|
|
option in module configuration
|
|
* The only exception is done for users who are in special group *Allow add implied groups from settings*: if your user is included in this group by the superuser then you may select
|
|
``Customer Addresses`` from ``Sale`` module ``Configuration >> Settings`` menu
|