Generic Security Restriction | Center of Research & Development

Generic Security Restriction allows you to hide user menus or give access to specific ones, window actions, contextual server actions, specific fields or stat buttons on the view. It also allows you to overwrite the parameters of Many2One fields as if they were rewritten in the field definition of the model.

This module has simple and fast configuration, and it is very easy to use!

You can handle following restrictions:

Hide menus by security groups
Give access to the specific menus only
Hide menu actions, contextual server actions
Restrict menus and any report / printing form from specific users
Hide specific fields of the selected model from certain security groups
Make fields readonly for certain security groups
Hide stat buttons (oe_stat_button) on the view from certain security groups
Apply restrictions via domain to any odoo model for specific user

Change fields paramaters on Many2one fields:

Rewrite field parameter: ('no_open'=True)
Rewrite field parameter: ('no_create'=True)
Rewrite field parameter: ('no_quick_create'=True)
Rewrite field parameter: ('no_create_edit'=True)

Note!

You can not grant access to the restricted menu items using Odoo access rights. Restrict menus for the Employee security group with caution.

User with superadmin rights gets full access regardless of restriction. This is done to avoid accidental permanent restrictions.

Hide menu by security groups

Hide menu from a specific user (Menu Items settings)

Restrict menu from a specific user (User settings)

Restrict report from a specific user (User settings)

Restrict menu from a specific groups

Give access to the specific menus only

Note

The user menu settings has high priority than group ones.

When menus specified in user settings, only they will be visible, even if others setted up in group of user.

Restrict action from a specific groups

Restrict contextual server action from a specific user

Hide specific fields of the selected model from certain security groups

For this, you need to activate the Developer Mode. Then, click Database Structure -> Models and select the desired model. On the Fields Security tab, specify the fields to hide or make readonly, and user security groups to hide from.

Make a field readonly

Hide stat buttons on the view

You can overwrite the parameters of Many2one fields from the user interface. When you select Many2one field, you will see additional options. To use these options, select the Rewrite Options checkbox.

Rewrite field parameter: ('no_open'=True)

This parameter makes the following changes:

In the Read mode, fields that are usually rendered and displayed as a link will be displayed as a normal readonly text
In the Edit mode, the button to open the record will be hidden