Customer & Vendor Portal User Onboarding, RBAC & Multi-Tenant Isolation

1. Overview & Business Value#

Portal users belong to the restricted base.group_portal security group.

1. Security Isolation Principles#

• Row-Level Security: Portal users can only view records where their partner record matches partner_id or message_partner_ids.
• Zero Backend Access: Portal users are strictly prohibited from loading the Odoo Web Client backend (/web or /odoo), maintaining complete boundary defense.

2. Prerequisites & Access Permissions#

• Required Modules: smart_backend_theme, base, web
• Security Group: Internal User (Technical ID: base.group_user)
• Master Data Dependencies: Established corporate settings, defined role permissions, and active records.

3. Step-by-Step UI Execution & Verification#

Step 1: Navigating to the Module Interface#

1. Access your SmartERP instance at https://smarterp.et/odoo.
2. Open the main App Switcher and select the operational application.
3. Select the target view or configuration form.

{screenshot:20-portal-user-onboarding-and-security-step1-navigation}

Step 2: Executing Transactional Operations#

1. Fill in required parameters according to institutional procedures.
2. Validate entries and confirm execution.
3. Review updated record state in the chatter audit trail.

{screenshot:20-portal-user-onboarding-and-security-step2-verification}

4. Advanced Configuration Points#

• Automated Tasks (Crons): Dedicated background crons manage recurring tasks and state transitions.
• Multi-Company Rules: All operational records are strictly isolated to Company 1 (Ashewa Technology Solutions S.C.).

5. Comprehensive Troubleshooting Matrix#