# Permissions on a limited set of fields in a model

**URL:** <https://discuss.tryton.org/t/permissions-on-a-limited-set-of-fields-in-a-model/951>\
**Category:** Developer\
**Created:** [December 12, 2018, 9:12am UTC](https://discuss.tryton.org/t/permissions-on-a-limited-set-of-fields-in-a-model/951 "2018-12-12T09:12:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxx](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/maxx/32/2320_2.png) [@maxx](https://discuss.tryton.org/u/maxx)\
**Post date:** [December 12, 2018, 9:12am UTC](https://discuss.tryton.org/t/permissions-on-a-limited-set-of-fields-in-a-model/951/1 "2018-12-12T09:12:49Z")

</div>

Hi,  
I would like to allow some users to create products but i don’t want to give them rights on all the fields of the product model. (for example, they could create product name, code, uom, but they should not have access to account fields, customs fields, cost price method, …) So allowing write permission to a specific set of fields and all other fields stay read-only.  
Is the “ir.model.field.access” bypassing the “ir.model.access” (field access priority on model access)? So i give only read permission on my group “limited\_product\_fields\_admin” and then i define a write permission to this group for each field they are allow to update ?  
If this is possible ? Is there an easy/another way to do this ? (another model heriting from product with other permissions and a specific form to create product ?)  
Thanks for help and suggestions!

---

<div class="post-metadata">

**Author:** ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)\
**Post date:** [December 12, 2018, 11:38am UTC](https://discuss.tryton.org/t/permissions-on-a-limited-set-of-fields-in-a-model/951/2 "2018-12-12T11:38:21Z")

</div>

> [@maxx](#):
>
> Is the “ir.model.field.access” bypassing the “ir.model.access” (field access priority on model access)?

No, you must have both kind validated to have access.

> [@maxx](#):
>
> So i give only read permission on my group “limited\_product\_fields\_admin” and then i define a write permission to this group for each field they are allow to update ?

No, you have to remove write permission to the fields by default and give it to a specific group.

> [@maxx](#):
>
> another model heriting from product with other permissions and a specific form to create product ?

This could be a solution if you have too much fields to manage.  
But you should be careful with required fields because they need a default value.

---

<div class="post-metadata">

**Author:** ![pokoli](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/pokoli/32/22_2.png) [@pokoli](https://discuss.tryton.org/u/pokoli)\
**Post date:** [April 1, 2022, 8:50am UTC](https://discuss.tryton.org/t/permissions-on-a-limited-set-of-fields-in-a-model/951/3 "2022-04-01T08:50:48Z")

</div>

A post was split to a new topic: [Permisos para botones](https://discuss.tryton.org/t/permisos-para-botones/5153)