PLANA Pulse documents and access
A real document management system with access control, one identity across every system, and a complete audit trail — on Odoo 18 Community + OCA, hosted by PLANA in Sofia. Shown on a live demo tenant seeded with a Bulgarian FMCG wholesaler's data.
Central document store with access control
Documents are organised in a directory tree, each folder governed by an access group. In the demo, three folders (customer contracts, invoices, warehouse documents) are open to all staff, while HR документи is restricted to management only — so each role sees exactly the folders it should. Documents attached to a business record (an invoice, a product) inherit that record's access rules automatically.
Modules: OCA dms (directories, files, access groups) + base_user_role for role-based access.
One identity across every system
Login goes through PLANA Identity (Authentik OIDC single sign-on), with two-factor authentication. The same credential opens the ERP, the documents and every other PLANA-hosted service — and disabling a person centrally cuts their access to all of them at once.
Modules: plana_auth (Authentik OIDC) + mandatory TOTP two-factor.
User-action audit log
An admin defines audit rules per model — customers, sales orders, invoices — and every create, write and delete is journalled with the user, timestamp, and old→new values, viewable under Settings → Technical → Audit → Logs. In the demo, changes by "Демо Администратор" across a journal entry, a sales order and a customer are already recorded:
Modules: OCA auditlog (application layer) + PLANA cluster-side audit webhook and Authentik login events (infrastructure layer).
Built on open foundations
| Capability | Powered by |
|---|---|
| Document store & organisation | OCA dms |
| Per-folder access control | DMS access groups + base_user_role |
| Single identity across systems | PLANA Identity (Authentik OIDC) + TOTP |
| User-action audit log | OCA auditlog |
| Infrastructure audit | PLANA K8s audit webhook + Authentik events |
| Hosted storage | EU-resident (Sofia), daily backups, 90-day retention |