[15.0 to 16.0] User Permission settings are not visible after upgrading from Odoo 15 to 16

[bttd]

Module

Base

Describe the bug

After upgrading an Odoo database from version 15 to 16, the users permission settings are not visible in the user's form view under the "Access Rights" tab. Only a limited set of permissions (like Administration and Sales) are displayed.

Key permission settings, such as "Portal", "Internal User", and application-specific permissions like "Project" (User/Administrator), are missing. These settings only become visible and editable when the Developer Mode is activated.

To Reproduce

Affected versions: 16 after upgrade

Steps to reproduce the behavior:

1. Take a database from Odoo 15.
2. Perform a migration to Odoo 16.
3. Go to Settings > Users & Companies > Users.
4. Open any user record to view their access rights.
5. Observe that most of the permission groups and settings are not displayed.
6. Activate Developer Mode.
7. Refresh the user form view, and observe that the missing settings are now visible.

Expected behavior
All user access rights and group settings should be visible and manageable in the standard user interface without needing to activate Developer Mode. The behavior should be consistent with a fresh Odoo 16 installation.

Additional context

This issue only occurs on a database migrated from Odoo 15. In a fresh Odoo 16 database, all user settings appear correctly without developer mode.

This suggests that some view definitions or access rights might not have been updated correctly during the database migration process.

No other significant issues have been identified yet, but it's possible other areas are also affected.

[pedrobaeza]

Have you updated base again after finishing migration?

[bttd]

Hi,

I do the upgrade with the following command:

sudo -u odoo odoo -c /etc/odoo/migration.conf -d odoo --upgrade-path=/var/lib/odoo/.local/share/Odoo/openupgrade/openupgrade_scripts/scripts --update all --stop-after-init --load=base,web,openupgrade_framework

my migration.conf:

[options]
addons_path = /usr/lib/python3/distpackages/odoo/addons,/var/lib/odoo/.local/share/Odoo/openupgrade
admin_passwd = xxxxxxxxxx
data_dir = /var/lib/odoo/.local/share/Odoo
db_host = False
db_maxconn = 64
db_name = False
db_password = False
db_port = False
db_sslmode = prefer
db_template = template0
db_user = odoo
dbfilter =

I ran the update command with --update base specifically. I also tried running these two variations, but the problem persists:

sudo -u odoo odoo -c /etc/odoo/migration.conf -d odoo --update base --stop-after-init sudo -u odoo odoo -c /etc/odoo/odoo.conf -d odoo --update base --stop-after-init

[pedrobaeza]

I mean a second time after running the migration.

[bttd]

First I ran the full migration script twice

sudo -u odoo odoo -c /etc/odoo/migration.conf -d odoo --upgrade-path=/var/lib/odoo/.local/share/Odoo/openupgrade/openupgrade_scripts/scripts --update all --stop-after-init --load=base,web,openupgrade_framework

Than I run the mentioned three variants after the migration.

sudo -u odoo odoo -c /etc/odoo/migration.conf -d odoo --upgrade-path=/var/lib/odoo/.local/share/Odoo/openupgrade/openupgrade_scripts/scripts --update base --stop-after-init --load=base,web,openupgrade_framework

sudo -u odoo odoo -c /etc/odoo/migration.conf -d odoo --update base --stop-after-init
sudo -u odoo odoo -c /etc/odoo/odoo.conf -d odoo --update base --stop-after-init

[pedrobaeza]

Uhm, reading again your steps, it seems correct that if no developer mode, no technical groups are shown. I don't know what do you mean by "missing settings".

[bttd]

I mean, this is how my user access right setup page looks like now:

There is missing settings like, set the user type, or set the project module permissions (admin or user)

edit:

With developer mode:

[pedrobaeza]

It seems you have some inheritance in the groups incorrect, like the project one. Compare that with a fresh install and adjust it.

[bttd]

I have compared some of the permission groups between our migrated database and a fresh Odoo 16 database, and I can see the discrepancies.

In some cases, there are records in the group's Access Rights or Views that exist in the fresh install but are missing in our migrated database. Conversely, there are also some old permission lines in our database that do not exist in the fresh one.

This leads to a practical question:
If a permission line is missing, should I create it manually?
If there is an extra, legacy permission line, should I just delete it?

I am concerned that adjusting these manually, group by group, would be very time-consuming and has a high potential for error.

Before I attempt a manual correction, could you advise if there is a way to automatically regenerate or reset a module's default security settings (like access rights, group inheritance and views) to match the Odoo 16 standard? If re-run the update script for specific module not solving this, is there another recommended procedure?

[pedrobaeza]

I'm talking just about group inheritance, not other things shown in the group. Permission line, security rules, and so are linked to the installed modules.