Configuration

Choosing sensitive models and fields, retention and scope.

Configuration has three parts: what is tracked, how long it is kept, and who can see it. Defaults ship for accounting, partners and users.

Nominate sensitive data

Open Security Center → Configuration → Tracked models. Add a model, then select the fields whose before and after values should be retained. Tracking a model without selecting fields records the write event but not the values.

res.partner        bank_ids, vat, credit_limit
account.move       amount_total, state, partner_id
product.template   list_price, standard_price
res.users          groups_id, active, login

Retention

Set a retention window per event type. Archived events are moved to a separate table on a scheduled job rather than deleted, so a compliance export can still reach them.

Access

Two groups ship with the module: Security Viewer, which can read the dashboard and logs, and Security Manager, which can additionally change configuration and terminate sessions. Configuration changes are themselves audited.