First of all, please do not get offended by the remark, I am just trying to 
contribute to this thread, which is very important for me. Please see it as a 
recommendation to extend the security module.

Well, I have to say that after a whole day exploring the access rights and the 
record rules, to implement an efficient security based on business needs, it 
turned out to be not really handy in Openerp.

The system itself is great as a framework and gives you a lot of options to 
achieve many requirements. It leaves you however with a lot of open questions 
and it is a real must to be an experienced technician to master these 
requirements.

Example:

1. In a multi-company setup, you would like to limit the access to the partners 
based on the country of the user company. The wizard can assist you to create 
the rule, it will turn out however in something like [('country','=',1)] which 
is based on the current logged on user and can not be used for everyone.

2. Limit the access to orders and quotations created per country to the sales 
team from that country

In my opinion, a nice add on would be to be able to provide an on the fly SQL 
statement as an example, which can be evaluated at run-time. This does not only 
extend the security model, but it does cover most requirements

I might be wrong in my statements and in that case I would like to really see a 
response.




-------------------- m2f --------------------

--
http://www.openobject.com/forum/viewtopic.php?p=47475#47475

-------------------- m2f --------------------


_______________________________________________
Tinyerp-users mailing list
http://tiny.be/mailman2/listinfo/tinyerp-users

Reply via email to