Skip to Content
This question has been flagged
securitycontrollersodoo9odoo10
1 Reply
7068 डेटा देखने का तरीका
अवतार
SEAN CALLAHAN

I want a controller that receives a http post with  Name + Value data from SomeRandomServer.  This data is later written to a model.

IE An event occurs, SomeRandomServer sends a POST saying "event has occurred" and a field in a model is written to with "event has occurred".


How do I ensure that the data has actually came from SomeRandomServer and not an impersonator sending similar data? Normally with HTTP routes you can set the auth to user, but in this case the data is not coming from a user, but another api. So how would security be enforced? Can I restrict access to the route by some other means?

अवतार
खारिज करें
अवतार
Fatih Piristine
Best Answer

how about you white-list the IP address of whatever server it is running on.

and/or create user for that model, make that api login and post.

to restrict others close it all other HTTP request ie. GET DELETE PUT so regular users won't see it. or give a redirect. only handle POST

अवतार
खारिज करें
Related Posts Replies डेटा देखने का तरीका ऐक्टिविटी
How to show informations hierarchically in views ?
odoo9 odoo10
अवतार
0
जुल॰ 17
4487
So difficult to describe franchising situation in Odoo?
odoo9 odoo10
अवतार
0
मार्च 17
4567
Users reporting when the login it shows them as a different user
security users odoo10
अवतार
0
जून 25
3971
To show all stages in Kanban view Solved
kanban odoo9 odoo10
अवतार
अवतार
अवतार
अवतार
3
दिस॰ 23
23940
Why does this security rule not work? (No matching record found for external id 'model_project_project') Solved
security accessrules odoo9
अवतार
अवतार
अवतार
अवतार
3
अप्रैल 23
36726