Access X-Ray — Effective Odoo Permissions
by TechnoVision · Odoo App
“Show me everyone who can see employee salaries” is a database query today, and most administrators cannot write it. The answer is not on any screen because it is not stored anywhere - it is the accumulated result of four mechanisms stacked on each other. Access X-Ray resolves all four.
One-off licence per Odoo instance. The store bills in its own base currency, so checkout may differ by a few cents. That is the add-on price. Installation and support are optional and priced separately.
Security Center
Live82
Score
1.2k
Events / 24h
3
Alerts
Export volume · 14 days
Unusual export detected
res.partner · 4,812 rows · outside business hours
Illustrative UI. Product screenshots to be dropped into this frame.
What it does
Every model an account can read, write, create or delete - and the group that granted each one. The onboarding and offboarding question, answered.
Who can touch hr.payslip, through which group, with unconstrained accounts listed separately. The auditor question, answered.
Side by side with the differences highlighted, for "make the new joiner like her, minus the finance bits".
Not "can delete invoices" but "because Billing Manager implies Accounting / Billing, which grants unlink on account.move".
If two groups grant the same right, both are named - so you are never sent to remove one and find that nothing changed.
Settings access, delete rights on sensitive models, accounts that can rewrite the rules, dormant accounts holding full access. Each names the accounts and what to do.
Group inheritance transitively, model access as the union across every group held, global record rules ANDed and group rules ORed, and the accounts that bypass all of it.
It reads users, groups, access rules and record rules and writes nothing but its own findings. An automated test in the module asserts exactly that.
Pricing & Services
The add-on licence is the product. Installation and a support plan are separate, optional, and neither is added to anything unless you choose it. The licence is bought into your own account, so you own it outright whether or not you ever buy a service from us.
The module, bought from the Odoo Apps Store into your own account.
$125
one-off, per Odoo instance · paid to the Odoo Apps Store
Installs and reads your existing groups. Nothing to configure against an external system.
$149
one-off · paid to TechnoVision
Twelve months of updates and help with the module, on top of what every licence already includes.
$90
per 12 months · paid to TechnoVision
A support plan adds to what you already have. It never replaces it: defect fixes and help with the module stay free for every licence holder, plan or no plan.
Supported: Odoo 18 and 19, Community and Enterprise. Licensed per Odoo instance, with no user limit and no expiry. Prices exclude any tax that applies where you are, and we tell you before you pay if any is due.
Demo
Recorded from a running Odoo 18 with real records. No slides, no mock-ups, and nothing sped up.
Screenshots
4 captures of the shipped product: effective permissions by user, who can touch this model, compare two users, risk findings.

Effective permissions by user

Who can touch this model

Compare two users

Risk findings
How it works
Depends on base only. It drags nothing else into your database and needs no external Python packages.
Pick a user or a model. The resolved answer comes back with the path that produced every line of it.
Put two accounts side by side, see the differences, then make the change in Odoo where permissions actually live.
Risk findings surface unconstrained accounts and dormant administrators, each naming the accounts and the action to take.
FAQ
No, and that is deliberate. It shows you what is true; you change it in Odoo. It is safe to install on a production database, and there is a test in the module that asserts it writes nothing but its own findings.
Not in this version. Field groups= attributes are not resolved. It covers model access rules, record rules and group inheritance.
No. They compose where both are present and neither requires the other. Audit Log & Security Center is the timeline - what happened. Access X-Ray is the map - who can make it happen.
No external service and no outbound connection. Access data never leaves your Odoo.
The module itself, for one Odoo instance, with no user limit and no expiry; every 18.0 release of the module, including security fixes; the module documentation, in the module and on this site; and defect fixes and help with configuration, at no extra cost and with no support plan required. It is a one-off licence for one Odoo instance, with no user limit and no expiry. It does not include installation on your instance, and configuration against your data; changes to the module for your own requirements; migration of the module or your data to another Odoo series; and work on your Odoo, your server, your network, or on other vendors’ modules.
No, and it is not hidden in the price either. Installation and configuration is a separate, optional service at $149 one-off. It covers remote installation on your instance; initial configuration of the module settings; and compatibility verification against your Odoo version and edition. If you or your partner install Odoo modules already, buy the licence on its own and skip it — most buyers of a module this size do.
Odoo 18 and 19, on Community and Enterprise. We do not claim a series until there is a branch for it, its tests pass on that series, and somebody has run it there — so the list on this page is what is actually supported rather than what is planned.
Twelve months of module updates, including security fixes; configuration support by email; priority handling: your ticket is looked at before unpaid enquiries; and help reproducing and reporting a defect, and a fix or a workaround. It runs for twelve months at $90 and is bounded by stated limits rather than by the word "reasonable": Up to 10 support requests in the twelve months; up to 4 hours of remote assistance in total; one Odoo minor-version upgrade of the module, within the same series; response within 2 business days, Sunday to Thursday, Cairo time; and covers the module. It does not cover your Odoo, your server, your network, or work on other modules.. The plan runs for 12 months from the day it starts and then stops. It renews only if you ask us to renew it — nothing renews automatically and no card is stored. It does not cover your Odoo, your server, your network, your backups, or other vendors’ modules; custom development or changes to how the module behaves; migration to another Odoo series — 18.0 to 19.0 is a project, not a ticket; on-site attendance, and work outside the hours below; and anything an external vendor charges for.
No, and this is the line worth being clear about. Defect fixes, at no charge, for the life of the 18.0 series; help when the module does not behave as its description says it does; answers to configuration questions about the module itself; and security fixes, released to everyone whether or not they hold a support plan — all of that comes with the licence, for every buyer, at no extra cost and whether or not a plan is ever bought. A paid plan adds updates, priority over unpaid enquiries and an allowance of assistance hours on top. It never takes anything away.
No, in any of the three options. A change to how a module behaves, a migration between Odoo series, and connecting a system we do not publish a connector for are each their own piece of work, quoted on their own. They are listed as exclusions on the cards rather than left to be discovered: they are the three things buyers most often assume are covered.
Use the buttons in the Pricing & Services section above. Both have a price, so the button takes you to a short form, shows you the total and what it covers before you commit, and creates a numbered order we reply to. No card details are taken on this site, and nothing is added to anything unless you choose it.
Install from Odoo Apps, or talk to us about a guided rollout across multiple companies.