TIP: You can type at any time to perform a new search.
DB Password Encryption
base_crypt · odoo/odoo
Security findings
Migration considerations
- For a target of Odoo 10.0+: use the `__manifest__.py` manifest name instead of `__openerp__.py`. The filename alone does not establish module age or compatibility. migration-openerp-manifest · source
users— Class 'users' still inherits from the old-style `osv.osv` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · sourceusers— Class 'users' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source- Raw `cr.execute()` INSERT/UPDATE/DELETE bypasses the ORM (no compute/constrains/tracking/mail): `update res_users set password=%s where id=%s` - re-check the table/column names still match after upgrading. migration-raw-sql-write · source
- Raw `cr.execute()` INSERT/UPDATE/DELETE bypasses the ORM (no compute/constrains/tracking/mail): `SELECT 1 FROM res_users WHERE id=%s FOR UPDATE NOWAIT` - re-check the table/column names still match after upgrading. migration-raw-sql-write · source
- Raw `cr.execute()` INSERT/UPDATE/DELETE bypasses the ORM (no compute/constrains/tracking/mail): `UPDATE res_users SET date=now() AT TIME ZONE 'UTC' WHERE id=%s` - re-check the table/column names still match after upgrading. migration-raw-sql-write · source
Migration review checklist, not a compatibility verdict. No target version is selected: apply version-specific advice only when migrating to that version or later.
- Repository
- odoo/odoo · module folder
- Module version
- 1.1
- Category
- Tools
- Folder size
- 0.08 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- http://www.openerp.com
- Last tracking update
- 2026-08-07 04:47:33
- Authors
- OpenERP SA, FS3
- Maintainers
- OpenERP SA
- Committers
- vro, Xavier Morel, Antony Lesuisse, Carlos Vásquez, niv-openerp, Numerigraphe - Lionel Sausin, Els Van Vossel, Vo Minh Thu, Olivier Dony, Stephane Wirtel, Israel Fermin Montilla, Launchpad Translations on behalf of openerp, Kuldeep Joshi (OpenERP), Fabien Pinckaers, Hardik Ansodariy (OpenERP), Raphael Collet
- Odoo dependencies
-
odoo/odoo:- base
- Python dependencies
- None
- System dependencies
- None
- Required by
- None
- Description
Replaces cleartext passwords in the database with a secure hash =============================================================== For your existing user base, the removal of the cleartext passwords occurs immediately when you instal base_crypt. All passwords will be replaced by a secure, salted, cryptographic hash, preventing anyone from reading the original password in the database. After installing this module it won't be possible to recover a forgotten password for your users, the only solution is for an admin to set a new password. Security Warning ++++++++++++++++ Installing this module does not mean you can ignore other security measures, as the password is still transmitted unencrypted on the network, unless you are using a secure protocol such as XML-RPCS or HTTPS. It also does not protect the rest of the content of the database, which may contain critical data. Appropriate security measures need to be implemented by the system administrator in all areas, such as: protection of database backups, system files, remote shell access, physical server access, etc. Interation with LDAP authentication +++++++++++++++++++++++++++++++++++ This module is currently not compatible with the ``user_ldap`` module and will disable LDAP authentication completely if installed at the same time.
Code Analysis
Views touched (0)
No views found for this module.
HTTP endpoints (0)
No HTTP endpoints found for this module.
Models touched (0)
No models found for this module.