#434 - I think I understand the model but can't make sense of which records users can and can't see.
What I would like to do is have record that can always be seen by its creator, and everyone in the group of the assigned user.
My concrete example: I'm using SuiteCRM Version 7.0.2 based on Sugar 6.5.16.
I have two groups of sales people, the groups are called "West" and "Midwest". These groups are assigned the role "Owner Rights" which have owner rights to everything.
I have another group, "Technicians" who have group rights to everything.
Someone from the sales team, groups "West" or "Midwest" will create records like projects. They will then assign projects to people in the "Technicians" group.
I want technicians to be able to see all projects that have been assigned to anyone in the technician group. I want project creators to always be able to see projects they create regardless of who it is assigned to.
I have additive rights, strict rights, inherit group from created by user, and inherit group from assigned to user.
This means a project created by someone in "West" and assigned to someone in "Technicians" should inherit the "Technician" group based on inheriting groups from the assigned to user, and therefore be visible to everyone in the "Technician" group. It's not.
I'm not sure if this means that with strict rights on that a record creator should still be able to see it. I have tried with strict rights off as well, which means the project record that's created by West and owned by Technician...
I think I realized where I was misunderstanding the model. When the record creator assigns a user, they give up their owner rights. So it seems the schema I came up with above will have to be modified in order to do what I want. I'm not sure if it's possible.
Here's a crude diagram that I think illustrates the problem http://i.imgur.com/ps5m5X3.png.
There is one tangent that is kind of a mystery to me. If I modified the roles that are assigned to "West" and "Midwest" to include group privileges on projects, then something strange happens. I have 8 projects of sample data. One person in the "West" group can see some projects owned by someone in the "Midwest" group, but not one in particular. I have no idea why this one project is not visible. I have double and triple checked that there is no parent record, both groups have the same role assigned, no users have a specific role, etc.
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago
10 years ago