Encryption data

This is a low-level technical module. It adds a hidden data table, encrypted.data, that keeps encrypted values identified by a technical name and an environment label (for example prod or preprod). Each name/environment pair must be unique, so the same key cannot be stored twice for the same environment.

• Data can only be read or written with elevated (sudo) rights; normal users get an access error. The access rules grant no permissions to any group, so the table is not usable from the standard interface.
• The encryption key is not stored in Odoo: it is read from the server configuration file, using an entry named after the environment. If that entry is missing, Odoo raises an error explaining what is needed.
• If the environment cannot be determined from the configuration, an error is raised asking to check the running environment setting.
• Values can be stored and retrieved as plain text or as JSON. When reading JSON, if the stored content is not valid JSON, a validation error is shown.
• If a value was encrypted with a different key, decryption fails with a clear message saying the password is unreadable unless the old key is recovered.
• Reading results are cached, and the cache is cleared after each save.

It touches only the encrypted.data model and depends on the base module. There are no menus, buttons, reports or scheduled actions.