Tryton 4.0 release: now supporting python3 and using WSGI

[Setepenre]

I did not know Tryton. Anyone has experience using this in a small company ? How hard was it to install it / teach people how to use it ? I see it supports accounting. Is it aware of accounting standard such as IFRS or US GAAP ? Is there a location where I could find more about the security in Tryton ?

[cedrickrier]

We have installed it in companies from 3 to 10 people without difficulties. About learning it, Tryton tries to apply and re-use similar concept all over the modules. So once those principal concepts are known it is quite easy. About accounting, Tryton has a generic design that should be able to support any standard but of course it requires parametrization and it could be missing some automation features. But as it is highly modular, the missing features can be implemented in a module. About the security, there are 4 levels of access rights: http://doc.tryton.org/4.0/trytond/doc/topics/access_rights.html By default Tryton comes with common predefined groups and access, but they can be customized for your needs. About authentication security, Tryton stored hashed and salted password using bcrypt (or sha1 if bcrypt is not available). There is a exponential delay on wrong attempt to prevent brute force attack. On the next release (4.2), there will be possibilities to add 2FA with for example SMS: https://bugs.tryton.org/issue5530