Restrict every menu, field and button safely with full visibility into who is affected
A fine-grained authorization layer on top of native Odoo groups: hide menus, fields, buttons, actions, models and records per user or group, add exceptions instead of all-or-nothing subtraction, and see the impact before you save.
The problem
Native Odoo security only goes so far: groups grant or deny access to whole models and menus, and record rules filter rows. Hiding one margin field, disabling a single Confirm button, or exposing a menu but not its underlying report action means custom development, duplicated views, or an unmanageable sprawl of narrow groups that drift out of sync with every upgrade.
The solution
Generic Security Restriction lets administrators define exactly what a group or individual user cannot see or do — menu, field, button, action, model or record — from one policy record, with additive exceptions, a live impact preview, and an audit log that proves the policy is actually enforced.
Everything a security matrix needs
Every capability below is implemented in the module.
Menu, field, button & action restriction
Hide menus, specific fields, named buttons and window or report actions per group or individual user — well beyond what native groups can express.
Model & record-level access control
Deny read, write, create or delete on a whole model, or hide records matching a domain, enforced at the ORM layer so it also covers RPC calls and scheduled actions.
Additive exceptions
Re-grant access on top of a restriction — "restrict this group, except these users or records" — instead of the subtraction-only logic most tools force you into.
Explicit precedence
Every restriction visibly states that it overrides native access rather than deferring to it, so outcomes are predictable instead of a silent collision.
Pre-apply impact preview & guardrails
See exactly which users and groups a restriction will affect before saving, with an inline warning when a rule targets a broad group like base Employees.
Time & weekday scheduling
Scope a restriction to a date range, business hours or specific weekdays, so contractor and seasonal access rules enforce themselves instead of being toggled by hand.
Trusted-IP allowlist
Relax a restriction only for requests from trusted IP ranges, and keep it enforced by default for RPC calls and scheduled jobs that carry no session context.
Temporary access with approval
Users request a time-boxed exception with a reason; an approver signs off, and it auto-expires at the configured end date without any manual cleanup.
Audit log & CSV bulk import
A queryable log of every blocked action and exception grant, plus a CSV import wizard that validates a whole security matrix in a dry run before committing.
How it works
Define a restriction
Choose a type — menu, field, button, action, model or record — then pick the model, menu or fields it applies to and the groups or users it targets.
Add exceptions & schedule
Re-grant access to specific users or groups, and optionally scope the restriction to business hours, a date range or trusted IP ranges.
Preview & apply
Review the impact panel showing exactly who is affected before saving, with a warning if the rule is about to lock out a broad group.
Monitor & manage exceptions
Track every blocked and granted event in the enforcement log, and approve or reject temporary access requests as they arrive.
Frequently asked
No sales fog. If your question isn't here, email us and we'll answer it the same way.
No. It layers on top of them. Restrictions are subtractive and always take precedence over a native grant, so you keep your existing group structure and add fine-grained exceptions on top instead of rebuilding it.
Buy it on the Odoo App Store
Purchase, download and install directly from the official Odoo Apps Store — you'll always get the latest supported build.
Generic Security Restriction
Restrict menus, fields, buttons, actions, models and records with additive exceptions, explicit precedence, an impact preview before you apply, schedule and trusted-IP scoping, and CSV bulk import.
Buy on Odoo App Store