Security and access control

1. Overview & Business Value#

This comprehensive operational guide details the architecture, business workflows, configuration parameters, and execution steps for Security and access control within SmartERP.

This reference document outlines access controls in ir.model.access.csv and record rules.

{screenshot:security-reference-overview-dashboard}

2. Prerequisites & Security Access Groups#

• Required Modules: purchase, stock, smarterp_store_voucher, purchase_requisition
• Security Groups:
  • Purchase User (Technical ID: purchase.group_purchase_user)
  • Purchase Administrator (Technical ID: purchase.group_purchase_manager)
  • Inventory User / Storekeeper (Technical ID: stock.group_stock_user)
• Master Data Dependencies: Product masters, units of measure, approved supplier catalog, warehouse storage locations, and procurement budget lines.

3. Step-by-Step Configuration & Execution#

Step 1: Navigating to the Module Interface#

1. Log into your SmartERP instance at https://smarterp.et/odoo.
2. Open the main App Switcher (grid icon in the top-left corner).
3. Select the Purchase app icon.
4. From the top navigation bar, open Purchase → Orders → Purchase Orders / Requisitions; Inventory → Operations.

{screenshot:security-reference-app-switcher-navigation}

Step 2: Creating and Parameterizing Records#

1. Click the New button in the top-left control panel.
2. Complete the mandatory fields in the record form:
   • Vendor / Supplier (Mandatory): Approved vendor profile with verified commercial license and TIN
   • Order Lines & Products (Mandatory): Specified items with precise quantities, units of measure, and unit costs
   • Delivery Destination (Mandatory): Physical store or warehouse receiving location
   • Fiscal Position & Taxes (Mandatory): Statutory 15% VAT and applicable withholding tax terms
3. Configure optional operational parameters and localized tags as required:
   • Requisition Reference (Optional): Link to approved departmental purchase requisition
   • Payment Terms (Optional): Contractual settlement schedule (Net 30, Advance, LC)
   • Incoterm & Port (Optional): Shipping terms for import consignments (FOB Djibouti, CIF Bole)
4. Click the Save icon in the control bar to commit the record.

{screenshot:security-reference-record-creation-form}

Step 3: Validating and Processing Transactions#

• State Transitions: Execute operational state progression (Draft RFQ → Sent → Confirmed Order → Received (GRN) → Billed → Locked).
• Ledger & System Impact: GRN validation posts stock valuation entries; vendor bill confirmation posts accounts payable and statutory withholding tax liabilities.
• Audit Verification: Automated recording of author ID, timestamp, and immutable revision history.

{screenshot:security-reference-transaction-processing-state}

User Groups#

• purchase.group_purchase_user: Buyer rights (create RFQs, view POs).
• purchase.group_purchase_manager: Purchasing manager (approve POs, publish tenders).
• stock.group_stock_user: Storekeeper (execute pickings, validate GRN/SIV).
• stock.group_stock_manager: Warehouse manager (adjust stock, configure locations).
• smarterp_purchase_portal.group_tender_custodian: Custody key holder for sealed envelopes.

Record Rules#

• Multi-Company Isolation: Users can only view tenders, POs, and stock quants belonging to their active company or branch.
• Tender Custody Privacy: Unopened commercial bids are inaccessible even to superusers via record rules until the cryptographic unsealing ceremony executes.

4. Advanced Configuration Points#

• Automated Actions & Scheduled Tasks (Crons):
  • Procurement: Run scheduler (reordering rules) (stock.ir_cron_run_procurement): Runs daily to generate RFQs for inventory items below safety stock
  • Stock: Expired lot quarantine trigger (stock.ir_cron_quarantine_expired): Runs daily to isolate batches past shelf life
  • Purchase: Check supplier delivery deadlines (purchase.ir_cron_check_deadlines): Runs daily to send automated expediting notices to suppliers
• Custom Print Templates & Reports:
  • Purchase Order Confirmation (Commercial Contract)
  • Ethiopian Goods Receiving Note (GRN / Model 19)
  • Store Issue Voucher (SIV / Model 20)
  • Vendor Bid Evaluation & Comparison Matrix
• Multi-Company Rules: Record-level security isolation under Company 1 (Ashewa Technology Solutions S.C.), preventing cross-company ledger leakage across parent and subsidiary legal entities.

5. Comprehensive Troubleshooting Matrix#

Next#

• Automation reference: Automation and scheduled cron jobs.