Xavier MorelandOlivier Dony
a9a6509713
New module for supporting two-factor authentication via time-base one-time-password (TOTP). Users (including portal users) can choose to enable two-factor auth in their user account settings, by scanning a QR code and adding it to an authenticator app, such as Google Auth, 1Password, etc. When two-factor is enabled, password-based non-interactive RPC is only possible by using API keys. Co-authored-by: Olivier Dony <odo@odoo.com>
17 lines
706 B
XML
17 lines
706 B
XML
<odoo>
|
|
<!-- copies ACL for portal users -->
|
|
<record model="ir.model.access" id="access_auth_totp_portal_wizard">
|
|
<field name="name">auth_totp_portal wizard access rules</field>
|
|
<field name="model_id" ref="auth_totp.model_auth_totp_wizard"/>
|
|
<field name="group_id" ref="base.group_portal"/>
|
|
<field name="perm_read">1</field>
|
|
<field name="perm_write">1</field>
|
|
<field name="perm_create">1</field>
|
|
<field name="perm_unlink">1</field>
|
|
</record>
|
|
<!-- adds portal users to rule -->
|
|
<record model="ir.rule" id="auth_totp.rule_auth_totp_wizard">
|
|
<field name="groups" eval="[(4, ref('base.group_portal'))]"/>
|
|
</record>
|
|
</odoo>
|