Security

Access Control Center

All-in-one access management for Odoo 14-20: read-only models, blocked create/edit/delete/export/import/print, hidden or read-only fields, hidden menus, buttons, tabs and chatter, record rules with soft restrict, login hours, IP whitelist and session limits, access teams, role templates, preview as user, audit log and JSON import/export. Community and Enterprise.

$149 USD
Choose your Odoo version
Ask a question
Built by an Odoo partner Initial setup support Download link by email
Access Control Center
What's included

Key features

1

Model Restrictions

Read-only models or block create, edit, delete, archive, duplicate, import, export and print per model; hide the Action menu or single actions.

2

Field Level Control

Hide fields, make them read-only or required, always or on a condition. Hidden fields disappear from reads, exports, filters and the API too.

3

Menus, Buttons & Tabs

Hide menus with their sub-menus, buttons, smart buttons, notebook tabs, search filters and the whole chatter or only messages, notes or activities.

4

Record Rules & Soft Restrict

Own records, own company or any domain. Hard mode hides other records, soft mode shows them but only lets users change their own.

5

Login Security

Working days and hours in the user's time zone, allowed IPs and ranges, idle session timeout and one session per user.

6

Teams & Role Templates

Target users, Odoo groups, companies or your own access teams. Start from Sales Rep, Cashier, Store Keeper, Accountant or Auditor templates.

7

Preview as User & Audit

See every restriction of a user on one screen, the rules per user and a log of blocked attempts and refused logins.

8

Import / Export & Bulk

Move rules from staging to production as JSON, apply restrictions to many models and rules at once, duplicate complete rules.

Inside the module

Screenshots

Real screens from Access Control Center — click any image to see it full size.

Step 1

Access rules

Every rule with its targets, validity, affected users and an on/off switch.

Access rules
Step 2

Model restrictions

Read-only or block create, edit, delete, archive, duplicate, import, export and print per model.

Model restrictions
Step 3

Field restrictions

Hide fields or make them read-only or required, always or on a condition.

Field restrictions
Step 4

Record rules

Own records, own company or a custom domain; soft mode shows all but changes only own.

Record rules
Step 5

Menus, buttons, tabs & chatter

Hide menus with sub-menus, buttons, tabs, filters, chatter parts and developer mode.

Menus, buttons, tabs & chatter
Step 6

Login & session security

Allowed days and hours, IP whitelist, idle timeout and one session per user.

Login & session security
Step 7

Temporary access

An auditor role valid for two weeks, created from a template.

Temporary access
Step 8

Access teams

Teams of users that rules can target, separate from technical groups.

Access teams
Step 9

Role templates

Sales Rep, Cashier, Store Keeper, Purchase User, Accountant and Auditor in one click.

Role templates
Step 10

Copy rules between users

Share the same rules or create separate copies with all lines.

Copy rules between users
Step 11

Preview as user

Every restriction of a user on one screen, before you switch the rule on.

Preview as user
Step 12

Rules per user

Which rules apply to which user right now.

Rules per user
Step 13

Blocked attempts log

Who tried what, on which model, from which IP, and why it was blocked.

Blocked attempts log
Step 14

Import rules

Bring rules from staging to production from a JSON export.

Import rules
Step 15

Bulk restrictions

Apply model restrictions to many rules and models at once.

Bulk restrictions
Step 16

What the user sees: list

No export, import or action menu for the restricted user.

What the user sees: list
Step 17

What the user sees: form

Read-only tax ID, required reference, hidden notes and internal tab.

What the user sees: form
Step 18

Blocked on the server

Even through the API the delete is refused with a clear message.

Blocked on the server
Step 19

Login refused outside the office network

Users outside the allowed IPs or hours cannot log in.

Login refused outside the office network
Step 20

Odoo 16: Access rules

The same screen on Odoo 16.

Odoo 16: Access rules
Step 21

Odoo 16: Model restrictions

The same screen on Odoo 16.

Odoo 16: Model restrictions
Step 22

Odoo 16: Field restrictions

The same screen on Odoo 16.

Odoo 16: Field restrictions
Step 23

Odoo 16: Login & session security

The same screen on Odoo 16.

Odoo 16: Login & session security
Step 24

Odoo 15: Access rules

The same screen on Odoo 15.

Odoo 15: Access rules
Step 25

Odoo 15: Model restrictions

The same screen on Odoo 15.

Odoo 15: Model restrictions
Step 26

Odoo 15: Field restrictions

The same screen on Odoo 15.

Odoo 15: Field restrictions
Step 27

Odoo 15: Login & session security

The same screen on Odoo 15.

Odoo 15: Login & session security
Step 28

Odoo 14: Access rules

The same screen on Odoo 14.

Odoo 14: Access rules
Step 29

Odoo 14: Model restrictions

The same screen on Odoo 14.

Odoo 14: Model restrictions
Step 30

Odoo 14: Field restrictions

The same screen on Odoo 14.

Odoo 14: Field restrictions
Step 31

Odoo 14: Login & session security

The same screen on Odoo 14.

Odoo 14: Login & session security
Common questions

Questions aboutthis module.

Something else? Ask our team.

Odoo 14, 15, 16, 17, 18, 19 and 20 (Community and Enterprise). Pick your version on this page.

No. The superuser and the members of the Access Control: Bypass group (the administrator by default) are never restricted.

No. Create, edit, delete, export, import, print, hidden fields, chatter and record rules are all checked on the server, so the API and other modules respect them too.

No. Rules live in their own module. Access teams are separate from technical groups, and record rules are managed automatically.

Yes. Set valid-from and valid-until on the rule, e.g. an external auditor for two weeks.

Select the rules, use Action > Export Rules (JSON) and import the file in the other database. Users are matched by login, groups and menus by technical name.

Use Odoo's built-in two-factor authentication together with this module's login hours, IP whitelist and session rules.

Yes. Free installation and help configuring your first rules. Email supportline.app@gmail.com or WhatsApp +92 302 1980998.

Not sure it's theright fit?

Book a free consultation and we'll help you pick the right modules for your workflow.