India

ZestyBeanz Technologies Pvt Ltd 4th Floor, Nila, Technopark Thiruvananthapuram,
India – 695581
Phone: +91 471 4063254
Fax : +91 471 2700171

   .

ZestyBeanz Technologies Pvt Ltd
2987, Manikkath Cross Road
Ravipuram, Kochi, India - 682016
Phone: +91 484 4063254

  UAE

Zesty Labs
Office # 2003, Millennium Plaza Building
Sheikh Zayed Rd, Dubai, UAE
Phone: +971 4333 2222​
Mobile: +971-50-5417245​

  Germany​

ZestyBeanz Technologies GmbH
Reuterstraße 1
90408 Nürnberg
Fon: +49 911 4801 444
Fax: +49 911 4801 445

Menu Level security In OpenERP V7

Contact Form


Anoop P's picture

Menu Level security In OpenERP V7

Many of our customer reported a security issue in OpenERP through web browser. If we copy a Url from Admin, and login as another user, where that menu restricted, the restricted user will be able access that pages and work on it. This is an OpenERP issues, where the menus are only “hidden” and not “restricted” to users. This can be a security issue if the pages are registred in search engines or If someone who is expert in OpenERP access the data.

Our OpenERP V7 "web_menu_security" module restricts all the menus from user who have no permission to access that. The attempt will redirect the user to home page. You can use this module, without any configuration in the database.

AttachmentSize
web_menu_security.zip3.84 KB

WASS's picture

Great work; Still a user can

Great work;
Still a user can modify the ids in the url: for exemple an employee can view all the employees in the company via changing the id:
localhost:xxxx/?db=test#id=1&view_type=form&model=hr.employee&action=156

Anonymous's picture

I have save in addons folder

I have save in addons folder & ticke technical feature box in user ,& i gad many time update amodule list , but not shown in module list

Frank's picture

This module seems not

This module seems not working. It causes blanks after I install it.

Anoop P's picture

Hi Frank, We checked and

Hi Frank,

We checked and didn't found any issue. Could you please logout first and then login again.