Xavier MorelandOlivier Dony
a9a6509713
New module for supporting two-factor authentication via time-base one-time-password (TOTP). Users (including portal users) can choose to enable two-factor auth in their user account settings, by scanning a QR code and adding it to an authenticator app, such as Google Auth, 1Password, etc. When two-factor is enabled, password-based non-interactive RPC is only possible by using API keys. Co-authored-by: Olivier Dony <odo@odoo.com>
17 lines
727 B
XML
17 lines
727 B
XML
<odoo>
|
|
<record model="ir.model.access" id="access_auth_totp_wizard">
|
|
<field name="name">auth_totp wizard access rules</field>
|
|
<field name="model_id" ref="model_auth_totp_wizard"/>
|
|
<field name="group_id" ref="base.group_user"/>
|
|
<field name="perm_read">1</field>
|
|
<field name="perm_write">1</field>
|
|
<field name="perm_create">1</field>
|
|
<field name="perm_unlink">1</field>
|
|
</record>
|
|
<record model="ir.rule" id="rule_auth_totp_wizard">
|
|
<field name="name">Users can only access their own wizard</field>
|
|
<field name="model_id" ref="model_auth_totp_wizard"/>
|
|
<field name="domain_force">[('user_id', '=', user.id)]</field>
|
|
</record>
|
|
</odoo>
|