← Back to team overview

openerp-community team mailing list archive

Re: Concerns about security with OpenERP v8

 

On 2014-02-01 13:46, Frédéric Clementi wrote:

another big issue are attachments access rights - i just give 2 examples

 * attached documents (invoice-pdf) may not be deleted/altered manually
   - as fiscal law requires reproduction during a long period
 * confidential documents attached to employee records must only be
   visible for the HR group


Dear OpenERP,

At Camptocamp we are more and more concerned about the lack of security settings in OpenERP.

With the v7 we had a great new tools with the security rules which allows us to give rights at object level. This is a great feature but you have to go further.

More and more of our customers ask us to do some fine tuning about security are our possibilities are very limited (ie : object inherited)

Just an exemple :
Very commonly, people using Project & Timesheets modules want to separate financial informations (trhough the analytic account link) from hours informations...

Problem : the analytic account and project are inheritated -> difficult to set that the project manager is able to do a financial follow up, see/create invoices + able to see hours of members of the projects BUT the simple member of the project can only see his own Timesheet lines in details but see the overall hours followup on the task he works... I can add that even the project manager should not have acces to the whole accounting...

We have many example like this one and I am very concern that security settings improvement is not even in the next improvement topics...

Please OpenERP do not miss that issue, customers are really concerned about the lack of security possibilities.

Then my question is simple : Do you have anything plan on this topic for v8 or next versions? What possibilities do we have ? Are we in a dead end here ?

Thank you

Frederic Clementi



Cordialement,
*camptocamp*
INNOVATIVE SOLUTIONS
BY OPEN SOURCE EXPERTS
*Frédéric Clementi*
Project Manager
Business Solutions
+41 21 619 10 41
**
www.camptocamp.com <http://www.camptocamp.com/>


_______________________________________________
Mailing list: https://launchpad.net/~openerp-community
Post to     : openerp-community@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~openerp-community
More help   : https://help.launchpad.net/ListHelp


--
Ferdinand


Follow ups

References