Odoo 12 Development Essentials - Fourth Edition

Preparing a dedicated system user

A good security practice is to run Odoo using a dedicated user, with no special privileges on the system.

We need to create the system and database users for that, with the following code:

$ sudo adduser --disabled-password --gecos "Odoo" odoo
$ sudo su -c "createuser odoo" postgres
$ createdb --owner=odoo odoo-prod

Here, odoo is the username and odoo-prod is the name of the database supporting our Odoo instance.

The odoo user was made the owner of the odoo-prod database. This means that it has create and drop privileges over that database, including the ability to drop a full database. If you're running a multi-tenant server, you should create an odoo—like specific system user for each tenant.

Odoo is designed ...