Lock down your Odoo environment to trusted IP addresses only. Define exactly which networks each user may log in from, receive instant alerts on unauthorized attempts, and audit every login event in real time — all from a single, no-code module.
Access Restriction By IP is an Odoo security module that controls user login access based on IP addresses. It replaces manual account monitoring and fragile password-only security with a structured, network-aware access layer — ensuring users can only log into Odoo from approved networks or locations. Whether you're protecting sensitive financial data, preventing unauthorized remote access, or enforcing compliance across a distributed team, this module gives administrators the control they've been missing in standard Odoo.
One module. Total login-level control over your Odoo environment. No development overhead.
Administrators can assign a specific set of allowed IP addresses to each Odoo user. Any login attempt originating from an IP not on the user's allowlist is automatically blocked before authentication completes.
Why it matters: this creates a network-level security perimeter inside Odoo that password controls alone cannot provide.
Each user can have more than one approved IP address assigned to their profile — covering home networks, office locations, or secondary access points.
Why it matters: teams that work across multiple sites or devices can remain productive without forcing a single static IP restriction that breaks legitimate workflows.
When a login attempt is blocked due to an IP mismatch, the system automatically sends an email alert to the Odoo administrator.
Why it matters: administrators are informed in real time, allowing immediate investigation rather than discovering security incidents after the fact.
Every blocked login attempt is recorded in a dedicated log that captures the user name, source IP address, date, and timestamp of the event.
Why it matters: a complete, timestamped activity record supports internal audits, compliance reviews, and forensic investigation when needed.
The login attempt log can be filtered by user, IP address, and date range, making it easy to isolate patterns, investigate specific users, or export records for reporting purposes.
Why it matters: security teams can quickly surface suspicious activity without manually scanning through unstructured data.
Instead of a single fixed IP, administrators can configure an IP range for users whose network address changes frequently — such as those working through VPNs, mobile networks, or DHCP-assigned corporate environments.
Why it matters: dynamic IP support eliminates the operational friction of constantly updating individual IP entries for distributed teams.
All IP assignment and configuration is handled directly inside the standard Odoo admin interface — no external firewall rules, no server-side configuration, and no coding required.
Why it matters: any Odoo administrator can manage the full access control setup without involving a developer or system administrator.
The module is certified for both Odoo Community and Enterprise editions across versions 16 and 17, and supports all three deployment models: Odoo Online, Odoo.sh, and On-Premise.
Why it matters: regardless of how your Odoo is hosted or which edition you run, this module integrates without compatibility issues.
Choose your Odoo version and explore interactive documentation
No development environment. No custom code. No consultant required for standard setup.
Search for zehntech_access_restriction_by_ip in your Odoo Apps menu and click Install. Compatible with Odoo 16 and 17 on both Community and Enterprise editions. No server restart required.
Navigate to Settings > Users in your Odoo backend. For each user, enter one or more approved IP addresses — or configure an IP range for users on VPNs or dynamic networks.
Set up the unauthorized access email notification so the designated administrator receives an instant alert whenever a blocked login attempt occurs.
Access the login attempt log from the admin panel to view all blocked access events in real time. Use built-in filters to sort by user, IP, or date for audits and compliance.
Includes lifetime updates and 90 days of dedicated technical support.
You have successfully subscribed to the newsletter
There was an error while trying to send your request. Please try again.