Domain Restrictions Not Working as Expected

I am trying to understand how Domains work in ERPNext.

What I configured:

  • Set “Restricted to Domain” in Module Def for some modules

  • Disabled that domain in Domain Settings

  • Unchecked all modules under Allow Modules in User

  • Set “Restricted to Domain” in Role

However, the user can still access those modules and related DocTypes.

So:

  • What is the actual purpose of Domain Settings?

  • Are domains meant to enforce access control or just affect UI visibility?

  • Under what conditions do domain restrictions actually take effect?

Would appreciate clarification.

1 Like