diff --git a/base_user_effective_permissions/= b/base_user_effective_permissions/=
new file mode 100644
index 000000000..bbe49c094
--- /dev/null
+++ b/base_user_effective_permissions/=
@@ -0,0 +1,22 @@
+# Copyright 2023 Hunki Enterprises BV
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0)
+
+{
+    "name": "Effective permissions",
+    "summary": "Inspect effective permissions applying to a user",
+    "version": "16.0.1.0.0",
+    "development_status": "Alpha",
+    "category": "Technical",
+    "website": "https://github.com/OCA/server-backend",
+    "author": "Hunki Enterprises BV, Odoo Community Association (OCA)",
+    "maintainers": ["hbrunn"],
+    "license": "AGPL-3",
+    "depends": [
+        "base",
+    ],
+    "data": [
+        "security/ir.model.access.csv",
+        "views/res_users_effective_permission.xml",
+        "views/res_users.xml",
+    ],
+}
diff --git a/base_user_effective_permissions/README.rst b/base_user_effective_permissions/README.rst
new file mode 100644
index 000000000..3a7748e55
--- /dev/null
+++ b/base_user_effective_permissions/README.rst
@@ -0,0 +1,103 @@
+=====================
+Effective permissions
+=====================
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:5108ef47acdaa695d28924080b90d6d1c72304a18c7cd09f4314fa0ecdeab7b0
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Alpha-red.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Alpha
+.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--backend-lightgray.png?logo=github
+    :target: https://github.com/OCA/server-backend/tree/18.0/base_user_effective_permissions
+    :alt: OCA/server-backend
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/server-backend-18-0/server-backend-18-0-base_user_effective_permissions
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/server-backend&target_branch=18.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+This module shows administrators a combined view of access rights and
+record rules per model with expressions expanded. This is convenient for
+reviewing permissions.
+
+.. IMPORTANT::
+   This is an alpha version, the data model and design can change at any time without warning.
+   Only for development or testing purpose, do not use in production.
+   `More details on development status <https://odoo-community.org/page/development-status>`_
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Usage
+=====
+
+To use this module, you need to be in developer mode and:
+
+1. Go to Settings/Users & Companies
+2. Open a user
+3. Click the Effective permissions button
+4. Note you can switch between the rule domains in text form or as
+   domain widget
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-backend/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/server-backend/issues/new?body=module:%20base_user_effective_permissions%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Hunki Enterprises BV
+
+Contributors
+------------
+
+- Holger Brunn <mail@hunki-enterprises.com>
+  (https://hunki-enterprises.com)
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+.. |maintainer-hbrunn| image:: https://github.com/hbrunn.png?size=40px
+    :target: https://github.com/hbrunn
+    :alt: hbrunn
+
+Current `maintainer <https://odoo-community.org/page/maintainer-role>`__:
+
+|maintainer-hbrunn| 
+
+This module is part of the `OCA/server-backend <https://github.com/OCA/server-backend/tree/18.0/base_user_effective_permissions>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/base_user_effective_permissions/__init__.py b/base_user_effective_permissions/__init__.py
new file mode 100644
index 000000000..0650744f6
--- /dev/null
+++ b/base_user_effective_permissions/__init__.py
@@ -0,0 +1 @@
+from . import models
diff --git a/base_user_effective_permissions/__manifest__.py b/base_user_effective_permissions/__manifest__.py
new file mode 100644
index 000000000..2957d441c
--- /dev/null
+++ b/base_user_effective_permissions/__manifest__.py
@@ -0,0 +1,22 @@
+# Copyright 2023 Hunki Enterprises BV
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0)
+
+{
+    "name": "Effective permissions",
+    "summary": "Inspect effective permissions applying to a user",
+    "version": "18.0.1.0.0",
+    "development_status": "Alpha",
+    "category": "Technical",
+    "website": "https://github.com/OCA/server-backend",
+    "author": "Hunki Enterprises BV, Odoo Community Association (OCA)",
+    "maintainers": ["hbrunn"],
+    "license": "AGPL-3",
+    "depends": [
+        "base",
+    ],
+    "data": [
+        "security/ir.model.access.csv",
+        "views/res_users_effective_permission.xml",
+        "views/res_users.xml",
+    ],
+}
diff --git a/base_user_effective_permissions/i18n/base_user_effective_permissions.pot b/base_user_effective_permissions/i18n/base_user_effective_permissions.pot
new file mode 100644
index 000000000..309cdca5b
--- /dev/null
+++ b/base_user_effective_permissions/i18n/base_user_effective_permissions.pot
@@ -0,0 +1,146 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_user_effective_permissions
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"
+
+#. module: base_user_effective_permissions
+#: model_terms:ir.ui.view,arch_db:base_user_effective_permissions.view_users_form
+msgid "<span class=\"o_stat_text\">Effective permissions</span>"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_permission
+msgid "Create"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_domain_widget
+msgid "Create domain"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_domain
+msgid "Create restrictions"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_uid
+msgid "Created by"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_date
+msgid "Created on"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_permission
+msgid "Delete"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_domain_widget
+msgid "Delete domain"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_domain
+msgid "Delete restrictions"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model,name:base_user_effective_permissions.model_res_users_effective_permission
+msgid "Effective permissions"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#. odoo-python
+#: code:addons/base_user_effective_permissions/models/res_users.py:0
+#, python-format
+msgid "Effective permissions for %s"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_human_name
+msgid "Human readable model name"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__id
+msgid "ID"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_id
+msgid "Model"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_name
+msgid "Model name"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_permission
+msgid "Read"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_domain_widget
+msgid "Read domain"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_domain
+msgid "Read restrictions"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model,name:base_user_effective_permissions.model_res_users
+msgid "User"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_permission
+msgid "Write"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_domain_widget
+msgid "Write domain"
+msgstr ""
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_domain
+msgid "Write restrictions"
+msgstr ""
diff --git a/base_user_effective_permissions/i18n/it.po b/base_user_effective_permissions/i18n/it.po
new file mode 100644
index 000000000..1cb6ca906
--- /dev/null
+++ b/base_user_effective_permissions/i18n/it.po
@@ -0,0 +1,149 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* base_user_effective_permissions
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2024-11-25 18:06+0000\n"
+"Last-Translator: mymage <stefano.consolaro@mymage.it>\n"
+"Language-Team: none\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 5.6.2\n"
+
+#. module: base_user_effective_permissions
+#: model_terms:ir.ui.view,arch_db:base_user_effective_permissions.view_users_form
+msgid "<span class=\"o_stat_text\">Effective permissions</span>"
+msgstr "<span class=\"o_stat_text\">Permessi effettivi</span>"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_permission
+msgid "Create"
+msgstr "Crea"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_domain_widget
+msgid "Create domain"
+msgstr "Crea dominio"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_domain
+msgid "Create restrictions"
+msgstr "Crea restrizioni"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_uid
+msgid "Created by"
+msgstr "Creato da"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__create_date
+msgid "Created on"
+msgstr "Creato il"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_permission
+msgid "Delete"
+msgstr "Cancella"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_domain_widget
+msgid "Delete domain"
+msgstr "Cancella dominio"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__unlink_domain
+msgid "Delete restrictions"
+msgstr "Cancella restrizioni"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__display_name
+msgid "Display Name"
+msgstr "Nome visualizzato"
+
+#. module: base_user_effective_permissions
+#: model:ir.model,name:base_user_effective_permissions.model_res_users_effective_permission
+msgid "Effective permissions"
+msgstr "Permessi effettivi"
+
+#. module: base_user_effective_permissions
+#. odoo-python
+#: code:addons/base_user_effective_permissions/models/res_users.py:0
+#, python-format
+msgid "Effective permissions for %s"
+msgstr "Permessi effettivi per %s"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_human_name
+msgid "Human readable model name"
+msgstr "Nome modello leggibile"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__id
+msgid "ID"
+msgstr "ID"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission____last_update
+msgid "Last Modified on"
+msgstr "Ultima modifica il"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_uid
+msgid "Last Updated by"
+msgstr "Ultimo aggiornamento di"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_date
+msgid "Last Updated on"
+msgstr "Ultimo aggiornamento il"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_id
+msgid "Model"
+msgstr "Modello"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__model_name
+msgid "Model name"
+msgstr "Nome modello"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_permission
+msgid "Read"
+msgstr "Leggi"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_domain_widget
+msgid "Read domain"
+msgstr "Leggi dominio"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__read_domain
+msgid "Read restrictions"
+msgstr "Leggi restrizioni"
+
+#. module: base_user_effective_permissions
+#: model:ir.model,name:base_user_effective_permissions.model_res_users
+msgid "User"
+msgstr "Utente"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_permission
+msgid "Write"
+msgstr "Scrivi"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_domain_widget
+msgid "Write domain"
+msgstr "Scrivi dominio"
+
+#. module: base_user_effective_permissions
+#: model:ir.model.fields,field_description:base_user_effective_permissions.field_res_users_effective_permission__write_domain
+msgid "Write restrictions"
+msgstr "Scrivi restrizioni"
diff --git a/base_user_effective_permissions/models/__init__.py b/base_user_effective_permissions/models/__init__.py
new file mode 100644
index 000000000..17d12ce8a
--- /dev/null
+++ b/base_user_effective_permissions/models/__init__.py
@@ -0,0 +1,2 @@
+from . import res_users
+from . import res_users_effective_permission
diff --git a/base_user_effective_permissions/models/res_users.py b/base_user_effective_permissions/models/res_users.py
new file mode 100644
index 000000000..a82229843
--- /dev/null
+++ b/base_user_effective_permissions/models/res_users.py
@@ -0,0 +1,23 @@
+# Copyright 2023 Hunki Enterprises BV
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0)
+
+
+from odoo import _, models
+
+
+class ResUsers(models.Model):
+    _inherit = "res.users"
+
+    def action_show_effective_permissions(self):
+        self.ensure_one()
+        permissions = self.env["res.users.effective.permission"]._generate_permissions(
+            self
+        )
+        return {
+            "type": "ir.actions.act_window",
+            "name": _("Effective permissions for %s") % self.name,
+            "res_model": "res.users.effective.permission",
+            "view_mode": "list",
+            "views": [[False, "list"]],
+            "domain": [("id", "in", permissions.ids)],
+        }
diff --git a/base_user_effective_permissions/models/res_users_effective_permission.py b/base_user_effective_permissions/models/res_users_effective_permission.py
new file mode 100644
index 000000000..584635137
--- /dev/null
+++ b/base_user_effective_permissions/models/res_users_effective_permission.py
@@ -0,0 +1,66 @@
+# Copyright 2023 Hunki Enterprises BV
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0)
+
+
+from odoo import fields, models
+from odoo.exceptions import AccessError
+
+
+class ResUsersEffectivePermission(models.TransientModel):
+    _name = "res.users.effective.permission"
+    _order = "model_human_name"
+    _description = "Effective permissions"
+
+    model_id = fields.Many2one("ir.model", string="Model")
+    model_name = fields.Char(related="model_id.model", string="Model name")
+    model_human_name = fields.Char(
+        related="model_id.name", string="Human readable model name"
+    )
+    create_permission = fields.Boolean("Create")
+    create_domain = fields.Char("Create restrictions")
+    create_domain_widget = fields.Char(related="create_domain", string="Create domain")
+    read_permission = fields.Boolean("Read")
+    read_domain = fields.Char("Read restrictions")
+    read_domain_widget = fields.Char(related="read_domain", string="Read domain")
+    write_permission = fields.Boolean("Write")
+    write_domain = fields.Char("Write restrictions")
+    write_domain_widget = fields.Char(related="write_domain", string="Write domain")
+    unlink_permission = fields.Boolean("Delete")
+    unlink_domain = fields.Char("Delete restrictions")
+    unlink_domain_widget = fields.Char(related="unlink_domain", string="Delete domain")
+
+    def _generate_permissions(self, user):
+        permissions = self.browse([])
+        operations = ("create", "unlink", "read", "write")
+        IrRule = (
+            self.env["ir.rule"]
+            .with_user(user)
+            .with_company(user.company_id)
+            .with_context(
+                allowed_company_ids=user.company_id.ids,
+            )
+        )
+        for model_record in self.env["ir.model"].search([]):
+            if model_record.model not in self.env:
+                continue
+            model = (
+                self.env[model_record.model]
+                .with_user(user)
+                .with_company(user.company_id)
+                .with_context(allowed_company_ids=user.company_id.ids)
+            )
+            vals = {"model_id": model_record.id}
+            ir_model_access = self.env["ir.model.access"].with_user(user)
+            for operation in operations:
+                vals[f"{operation}_permission"] = ir_model_access.check(
+                    model._name, operation, raise_exception=False
+                )
+            for operation in operations:
+                try:
+                    vals[f"{operation}_domain"] = IrRule._compute_domain(
+                        model._name, operation
+                    )
+                except AccessError:
+                    vals[f"{operation}_domain"] = "[]"
+            permissions += self.create(vals)
+        return permissions
diff --git a/base_user_effective_permissions/pyproject.toml b/base_user_effective_permissions/pyproject.toml
new file mode 100644
index 000000000..4231d0ccc
--- /dev/null
+++ b/base_user_effective_permissions/pyproject.toml
@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"
diff --git a/base_user_effective_permissions/readme/CONTRIBUTORS.md b/base_user_effective_permissions/readme/CONTRIBUTORS.md
new file mode 100644
index 000000000..19459e90a
--- /dev/null
+++ b/base_user_effective_permissions/readme/CONTRIBUTORS.md
@@ -0,0 +1,2 @@
+- Holger Brunn \<mail@hunki-enterprises.com\>
+  (<https://hunki-enterprises.com>)
diff --git a/base_user_effective_permissions/readme/DESCRIPTION.md b/base_user_effective_permissions/readme/DESCRIPTION.md
new file mode 100644
index 000000000..41761c822
--- /dev/null
+++ b/base_user_effective_permissions/readme/DESCRIPTION.md
@@ -0,0 +1,3 @@
+This module shows administrators a combined view of access rights and
+record rules per model with expressions expanded. This is convenient for
+reviewing permissions.
diff --git a/base_user_effective_permissions/readme/USAGE.md b/base_user_effective_permissions/readme/USAGE.md
new file mode 100644
index 000000000..14657e78f
--- /dev/null
+++ b/base_user_effective_permissions/readme/USAGE.md
@@ -0,0 +1,7 @@
+To use this module, you need to be in developer mode and:
+
+1.  Go to Settings/Users & Companies
+2.  Open a user
+3.  Click the Effective permissions button
+4.  Note you can switch between the rule domains in text form or as
+    domain widget
diff --git a/base_user_effective_permissions/security/ir.model.access.csv b/base_user_effective_permissions/security/ir.model.access.csv
new file mode 100644
index 000000000..80d829858
--- /dev/null
+++ b/base_user_effective_permissions/security/ir.model.access.csv
@@ -0,0 +1,2 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_res_users_effective_permission,access_res_users_effective_permission,base_user_effective_permissions.model_res_users_effective_permission,base.group_user,1,0,1,0
diff --git a/base_user_effective_permissions/static/description/icon.png b/base_user_effective_permissions/static/description/icon.png
new file mode 100644
index 000000000..3a0328b51
Binary files /dev/null and b/base_user_effective_permissions/static/description/icon.png differ
diff --git a/base_user_effective_permissions/static/description/index.html b/base_user_effective_permissions/static/description/index.html
new file mode 100644
index 000000000..5bbbdc065
--- /dev/null
+++ b/base_user_effective_permissions/static/description/index.html
@@ -0,0 +1,446 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
+<title>Effective permissions</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 9511 2024-01-13 09:50:07Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+Despite the name, some widely supported CSS2 features are used.
+
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: gray; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic, pre.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document" id="effective-permissions">
+<h1 class="title">Effective permissions</h1>
+
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:5108ef47acdaa695d28924080b90d6d1c72304a18c7cd09f4314fa0ecdeab7b0
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Alpha" src="https://img.shields.io/badge/maturity-Alpha-red.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/server-backend/tree/18.0/base_user_effective_permissions"><img alt="OCA/server-backend" src="https://img.shields.io/badge/github-OCA%2Fserver--backend-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/server-backend-18-0/server-backend-18-0-base_user_effective_permissions"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/server-backend&amp;target_branch=18.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
+<p>This module shows administrators a combined view of access rights and
+record rules per model with expressions expanded. This is convenient for
+reviewing permissions.</p>
+<div class="admonition important">
+<p class="first admonition-title">Important</p>
+<p class="last">This is an alpha version, the data model and design can change at any time without warning.
+Only for development or testing purpose, do not use in production.
+<a class="reference external" href="https://odoo-community.org/page/development-status">More details on development status</a></p>
+</div>
+<p><strong>Table of contents</strong></p>
+<div class="contents local topic" id="contents">
+<ul class="simple">
+<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a></li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-2">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-3">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-4">Authors</a></li>
+<li><a class="reference internal" href="#contributors" id="toc-entry-5">Contributors</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-6">Maintainers</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="usage">
+<h1><a class="toc-backref" href="#toc-entry-1">Usage</a></h1>
+<p>To use this module, you need to be in developer mode and:</p>
+<ol class="arabic simple">
+<li>Go to Settings/Users &amp; Companies</li>
+<li>Open a user</li>
+<li>Click the Effective permissions button</li>
+<li>Note you can switch between the rule domains in text form or as
+domain widget</li>
+</ol>
+</div>
+<div class="section" id="bug-tracker">
+<h1><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h1>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/server-backend/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/server-backend/issues/new?body=module:%20base_user_effective_permissions%0Aversion:%2018.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h1><a class="toc-backref" href="#toc-entry-3">Credits</a></h1>
+<div class="section" id="authors">
+<h2><a class="toc-backref" href="#toc-entry-4">Authors</a></h2>
+<ul class="simple">
+<li>Hunki Enterprises BV</li>
+</ul>
+</div>
+<div class="section" id="contributors">
+<h2><a class="toc-backref" href="#toc-entry-5">Contributors</a></h2>
+<ul class="simple">
+<li>Holger Brunn &lt;<a class="reference external" href="mailto:mail&#64;hunki-enterprises.com">mail&#64;hunki-enterprises.com</a>&gt;
+(<a class="reference external" href="https://hunki-enterprises.com">https://hunki-enterprises.com</a>)</li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h2><a class="toc-backref" href="#toc-entry-6">Maintainers</a></h2>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org">
+<img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
+</a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>Current <a class="reference external" href="https://odoo-community.org/page/maintainer-role">maintainer</a>:</p>
+<p><a class="reference external image-reference" href="https://github.com/hbrunn"><img alt="hbrunn" src="https://github.com/hbrunn.png?size=40px" /></a></p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/server-backend/tree/18.0/base_user_effective_permissions">OCA/server-backend</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</body>
+</html>
diff --git a/base_user_effective_permissions/tests/__init__.py b/base_user_effective_permissions/tests/__init__.py
new file mode 100644
index 000000000..a9d6740bb
--- /dev/null
+++ b/base_user_effective_permissions/tests/__init__.py
@@ -0,0 +1 @@
+from . import test_base_user_effective_permissions
diff --git a/base_user_effective_permissions/tests/test_base_user_effective_permissions.py b/base_user_effective_permissions/tests/test_base_user_effective_permissions.py
new file mode 100644
index 000000000..34c21b9ed
--- /dev/null
+++ b/base_user_effective_permissions/tests/test_base_user_effective_permissions.py
@@ -0,0 +1,19 @@
+# Copyright 2023 Hunki Enterprises BV
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0)
+
+
+from odoo.tests.common import TransactionCase
+
+
+class EffectivePermissionsCase(TransactionCase):
+    def test_effective_permissions(self):
+        """Test effective permissions of base.user_demo"""
+        action = self.env.ref("base.user_demo").action_show_effective_permissions()
+        permissions = self.env["res.users.effective.permission"].search(
+            action["domain"]
+        )
+        self.assertTrue(
+            permissions.filtered(
+                lambda x: x.model_name == "res.company"
+            ).read_permission
+        )
diff --git a/base_user_effective_permissions/views/res_users.xml b/base_user_effective_permissions/views/res_users.xml
new file mode 100644
index 000000000..6415aade0
--- /dev/null
+++ b/base_user_effective_permissions/views/res_users.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2023 Hunki Enterprises BV
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0) -->
+<data>
+    <record id="view_users_form" model="ir.ui.view">
+        <field name="model">res.users</field>
+        <field name="inherit_id" ref="base.view_users_form" />
+        <field name="arch" type="xml">
+            <xpath expr="//div[@name='button_box']" position="inside">
+                <button
+                    name="action_show_effective_permissions"
+                    type="object"
+                    groups="base.group_no_one"
+                    icon="fa-shield"
+                >
+                    <span class="o_stat_text">Effective permissions</span>
+                </button>
+            </xpath>
+        </field>
+    </record>
+</data>
diff --git a/base_user_effective_permissions/views/res_users_effective_permission.xml b/base_user_effective_permissions/views/res_users_effective_permission.xml
new file mode 100644
index 000000000..e3f9b40a5
--- /dev/null
+++ b/base_user_effective_permissions/views/res_users_effective_permission.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2023 Hunki Enterprises BV
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl-3.0) -->
+<data>
+    <record id="res_users_effective_permission_tree" model="ir.ui.view">
+        <field name="model">res.users.effective.permission</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="model_id" />
+                <field name="model_name" invisible="1" />
+                <field name="create_permission" optional="show" />
+                <field name="create_domain" optional="show" />
+                <field
+                    name="create_domain_widget"
+                    optional="hide"
+                    widget="domain"
+                    options="{'model': 'model_name'}"
+                />
+                <field name="read_permission" optional="show" />
+                <field name="read_domain" optional="show" />
+                <field
+                    name="read_domain_widget"
+                    optional="hide"
+                    widget="domain"
+                    options="{'model': 'model_name'}"
+                />
+                <field name="write_permission" optional="show" />
+                <field name="write_domain" optional="show" />
+                <field
+                    name="write_domain_widget"
+                    optional="hide"
+                    widget="domain"
+                    options="{'model': 'model_name'}"
+                />
+                <field name="unlink_permission" optional="show" />
+                <field name="unlink_domain" optional="show" />
+                <field
+                    name="unlink_domain_widget"
+                    optional="hide"
+                    widget="domain"
+                    options="{'model': 'model_name'}"
+                />
+            </list>
+        </field>
+    </record>
+    <record id="res_users_effective_permission_search" model="ir.ui.view">
+        <field name="model">res.users.effective.permission</field>
+        <field name="arch" type="xml">
+            <search>
+                <field name="model_id" />
+            </search>
+        </field>
+    </record>
+</data>