Odoo 12 Development Essentials - Fourth Edition

Security record rules

When given access to a Model, by default users will be able to access all its records. But in some cases, we need to restrict the particular records each user should be able to access. This is possible using record rules, which define domain filters to automatically be enforced when performing read or write operations.

For example, in our to-do app, the To-do Items are expected to be private, so we want users to only be able to see their own items. We need a record rule to filter only the records created by the current user:

• The create_uid field is automatically added by the framework, and stores the user that created the record, and we can use it to see who owns each record
• The current user is available in the user ...