by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Free 30 day trial
Try it Now

By clicking you consent to share your profile with the developer

#1579 - Users under the same role and group can't view each others records

Closed Bug? created by tamer.morsy 9 years ago

Hi,

I've got 2 users (A and B), assigned to the role "MDP", the role is assigned to the group "SAYG" I have set the access for the role MDP so that the users in it can view the group records in the tasks module

The issue: A and B can't view each other's records.

Note: as an admin, if I go to one of A's tasks, clicked edit, and then save (without changing anything), B will be able to view this record. Also, if I did a mass update for all A & B's tasks, and re-assign to the same group they are already in "SAYG", A & B will be able to view each other's tasks.

Is there anyway to solve it except the manual updating? Also, regarding the emails, how to make A and B view each other's emails?

Thanks,

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    9 years ago

    Hi Tamer,

    You'll need to add the SAYG group to all existing records as appropriate. Then going forward they will be auto-added based on your configuration in SecuritySuite Settings. Clicking save is triggering the inheritance based on the assigned user. This explains the behavior that you are seeing.

    You can use the Mass Assign on the list views to get the SAYG group assigned to the right records or go directly in the database and do it if you are comfortable with SQL. Everything exists in the securitygroups_records table.

    Let me know if you have any questions.

    • tamer.morsy member avatar

      tamer.morsy

      9 years ago

      What about the emails, do you have a suggestion of how to make A and B's sent emails visible to both of them? (Related to contacts and leads modules)

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      9 years ago

      With Inherit from Parent enabled, those emails should automatically inherit the security groups that are assigned to the contacts and leads. Then ensure that the users' rights for Emails is set to Group or All.

  2. tamer.morsy member avatar

    tamer.morsy

    9 years ago

    I mean for the current records

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      9 years ago

      For current Email records that were created before having SecuritySuite installed, it'll need to be done via the database as there isn't a List View in Sugar for them.

      Here is a sample query that would grab the groups from the parent record for Contacts and add the groups to the Emails. Make sure to back up your database before running any scripts such as this.

      insert into securitygroups_records(id,securitygroup_id,record_id,module,date_modified,deleted)
      select uuid(),sg.id,e.id,'Emails',now(),0
      from securitygroups sg
      inner join securitygroups_records sr on sg.id = sr.securitygroup_id and sr.module = 'Contacts' and sr.deleted = 0
      inner join contacts c on sr.record_id = c.id and c.deleted = 0
      inner join emails e on c.id = e.parent_id and e.parent_type = 'Contacts' and e.deleted = 0
      where sg.deleted = 0;
      
    • tamer.morsy member avatar

      tamer.morsy

      9 years ago

      Many thanks for the prompt reply

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      9 years ago

      Glad to help! I'm going to close this case out for now, but feel free to follow up here or create a new case if you need anymore help.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
Rating
Rating
  • "Couldn't do without it. Highly recommended and I guarantee that you will not find another alternative."

    Read More Reviews