Menu Level security In OpenERP V7
Many of our customer reported a security issue in OpenERP through web browser. If we copy a Url from Admin, and login as another user, where that menu restricted, the restricted user will be able access that pages and work on it. This is an OpenERP issues, where the menus are only “hidden” and not “restricted” to users. This can be a security issue if the pages are registred in search engines or If someone who is expert in OpenERP access the data.
Our OpenERP V7 "web_menu_security" module restricts all the menus from user who have no permission to access that. The attempt will redirect the user to home page. You can use this module, without any configuration in the database.
| Attachment | Size |
|---|---|
| web_menu_security.zip | 3.84 KB |