sql_request_abstract
This module provides an abstract model for securely managing and executing SQL SELECT requests in Odoo, with built-in validation and access controls.
Key Features
- sql_request: Enforces read-only operations by prohibiting SQL keywords like DELETE, UPDATE, INSERT, and access to sensitive tables such as ir_config_parameter.
- sql_request: Implements a validation workflow where requests transition from draft to SQL Valid state through cleaning, prohibited word checks, and execution testing.
- sql_request: Supports execution against internal Odoo database or external databases configured in the system.
- sql_request: Provides multiple execution modes including fetching all/one results, creating views or materialized views, and exporting data to CSV.
- sql_request: Defines access control groups including SQL Request User for viewing and executing valid requests, and SQL Request Manager for full administrative access.
- sql_request: Includes a user interface with an ACE code editor featuring PostgreSQL syntax highlighting for composing SQL queries.
- sql_request: Allows restricting query access to specific user groups and individual users for enhanced security.