Record-Rule & Access-Righ
See who can read/write/create/delete each model, simulate as any user and export the access matrix
ACL debugging in Odoo is dark — model access rights, implied/inherited groups and record rules interact in ways nobody can reason about by eye. This module makes them visible. It rolls up every ir.model.access line that applies (directly or through inherited groups) into an effective permission matrix, shows the exact lines and groups granting each permission to a given user, parses record-rule domains for read/write/create/unlink, and answers concrete “can this user touch this record?” questions. It never grants access — it only reports the configuration you already have.
Key Features
Effective Access Matrix
For any set of models, compute the effective read / write / create / unlink permission per security group, rolled up across all applicable access lines and implied groups — exportable to CSV.
User Permission Probe
Pick a user and a model to see the permissions they actually have (the union across all their groups) plus the exact access lines and groups granting each one. No more guessing.
Record-Rule Inspector
List the global and group record rules on a model, whether they apply to a given user, and the parsed domain per operation — so you can see which subset of records a user can touch.
“Can This User Do X?”
Answer create/read/write/unlink questions for a user and model, and where a specific record is supplied, evaluate the record rules against it to show whether that record is in scope.
Snapshots & Diff
Save an access-matrix snapshot, then diff before and after a security change to prove exactly what permissions moved — ideal audit evidence.
Read-Only & Safe
The module only reports on existing configuration; it never creates, alters or grants any access right, so it is safe to run in production.
Nothing Native Shows This
Odoo gives no consolidated view of effective permissions across inherited groups and record rules — this computes it for you.
Audit-Ready Evidence
CSV exports and snapshot diffs give security reviewers concrete, before/after proof of who could access what.
Screenshots
Access Matrix
User Permission Probe
Can User Do X
Snapshots
Why Choose This Module
For any set of models, compute the effective read / write / create / unlink permission per security group, rolled up across all applicable access lines and implied groups — exportable to CSV.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: OPL-1
- Languages: English
- Author: Pokutsoft
- Dependencies: base
- Support: support@pokutsoft.com
Update date: 2026-07-02