OdooWiki OCA HUB

Effective permissions

base_user_effective_permissions folder_open OCA/server-backend open_in_new
Technical License: AGPL-3

This module shows administrators a combined view of access rights and record rules per model with expressions expanded. This is convenient for reviewing permissions.

auto_awesome What this module does

AI-generated from the code · Odoo 18.0

Adds an "Effective permissions" button on the user form that opens a list showing, per model, whether the user can create, read, write or delete records and the record rules that restrict those operations.

This module helps administrators understand what a specific user is really allowed to do in Odoo. On the user form, a button labelled "Effective permissions" appears in the button box (visible only to technical users). Clicking it opens a list titled "Effective permissions for <user name>".

The list has one line per model and shows four permission columns: Create, Read, Write and Delete. For each operation that is allowed, it also shows the restrictions coming from record rules, both as a readable expression and as an editable domain widget. Lines are ordered by the human-readable model name, and a search field lets you filter by model.

The calculation is done live for the selected user, taking into account their company and allowed companies. Models that are not installed or are abstract are skipped. The result is a temporary list, so nothing is stored permanently. No new menus are added; the feature is reached from the user form. The module extends res.users and adds the temporary model res.users.effective.permission.

Depends on

base
Models and fields (2)
  • res.users · extends an existing model
  • res.users.effective.permission · new modelmodel_id (Model), model_name (Model name), read_domain (Read restrictions), write_domain (Write restrictions), create_domain (Create restrictions), unlink_domain (Delete restrictions), read_permission (Read), model_human_name (Human readable model name), write_permission (Write), create_permission (Create), unlink_permission (Delete), read_domain_widget (Read domain), write_domain_widget (Write domain), create_domain_widget (Create domain), unlink_domain_widget (Delete domain)

Text generated by AI (DeepSeek) from reading the Odoo 18.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub

Availability by version

Reviewed: 2026-11-03
Confirmed (verified in repository and branch) Estimated (unverified) No information

Confirmation status: 2 confirmed, 7 with no information of 9 versions.

Sources · Odoo 16.0

Confirmed on 2026-11-03 in branch 16.0 of OCA/server-backend.

terminal Installation and usage

OCA documentation · Odoo 18.0

To use this module, you need to be in developer mode and:

  • Go to Settings/Users & Companies
  • Open a user
  • Click the Effective permissions button
  • Note you can switch between the rule domains in text form or as domain widget

No verified information in OCA: Installation, Configuration.

info

Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.