Thomas (thbe)
82985296e1
Prior to this, there was no way to shut an active session you didn't have the access to anymore or close every active session remotely. Adding the RevokeAllDevices class, it is now possible to close every open sessions, including the one you are performing the action on of the account you are logged into via the Account Security page in the preferences. This system is based on the principle that every open session uses the password hash to maintain it. When the hash is computed, salt is added to it to make it not reversible. Thanks to that salt, it is possible to change the user's password's hash without changing the password. Therefore, the flow of this addition is the following : 1. User clicks on the button and uses his passord to confirm identity. 2. User's input is used to check his identity (_check_credentials()). 3. User's input is used to refresh the password hash in the db (_change_password()). 4. User is logged out. This adds a way to close all sessions remotely and improve user's control over their account and therefore their security. task-3191567 closes odoo/odoo#113899 Related: odoo/upgrade#4951 Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials