SecuritySuite - SuiteCRM and CE Teams

Hello,

Thank you very much. I have found these two codes you mentioned, but the logic is written for every module and every security group. I just need to alter the settings so that one or more users I add from another group can see assigned to and user names without inheriting any role rules from that group. Can you please help out as I'm not a php developer.

Looking forward to your reply.

Best Regards,

Slaven.

A better place is actually in modules/SecurityGroups/SecurityGroup.php in getGroupUsersWhere(). Replace the user id and group id place holders. This is a hack that will be wiped out whenever there is an update so be sure to back this up to merge back in:

    function getGroupUsersWhere($user_id)
    {
        //exception that should see users from a specific group
        if($user_id == 'ID-OF-THE-USER')
        {
            return " users.id in (
                select sec.user_id from securitygroups_users sec
                where sec.deleted = 0 and sec.securitygroup_id = 'ID-OF-THE-SECURITY-GROUP'
            )";
        }
        else
        {
            return " users.id in (
                select sec.user_id from securitygroups_users sec
                inner join securitygroups_users secu on sec.securitygroup_id = secu.securitygroup_id and secu.deleted = 0
                    and secu.user_id = '$user_id'
                where sec.deleted = 0
            )";
        }

    }

It won't work until you replace the ID-OF-THE-USER and the -ID-OF-THE-SECURITY_GROUP values. It may be helpful to have a dev do this part for you.

I don't see us adding this to SecuritySuite in the near future. Seems like a pretty specific need at this time.

Hello,

Thank you for your input. Of course I have replaced the values with id of user and security group from the database tables "securitygroup and securitygroup_users", it's just that the code is not working, roles from security group are still inherited.

Let me just explain this briefly again. Let's say that user name is "Steve" and he belongs to the group "One", that group has some roles setup for accessing Accounts module. Now "Steve" is the only member of that group but he needs to see other users that are part of group "Two" and their records. He can't see them unless he is a member of that group. Now, when we add him, he will inherit role rights of group "One" and this will allow him to have rights that we don't want.

This is the first problem, the second is what if more users from group "One" needs to have that kind of access to group "Two".

Looking forward to your reply.

Best Regards,

Slaven.

Sorry for the extremely slow response here. I lost this over the holidays. There is an option under SecuritySuite Settings called Strict Rights where the group that is assigned to the record drives which role to use. So if you are assigning roles to the group then if only "Two" is assigned to a record then only the role associated to "Two" will be applied to "Steve".