#694 - User Role Access
We have a user role for users that aren't part of any security group. There's an issue with the permissions for this role. The access for editing accounts is set to 'Owner', but users aren't able to edit the accounts that they have created. The 'Owner' setting should allow the users in this role to edit an account as long as it is created by them. I want to enable editing for these users without having to assign them all to a security group.
10 years ago
Sugar's definition of "Owner" is if the user is the "Assigned To" user on a record. It doesn't check if the user also created the record. You would have to hack /data/SugarBean.php to do that in the isOwner function.
10 years ago
Looking at that function, if there's no Assigned To user, it then looks at the Created By user. When testing this though, the Assigned To user and Created By user were both set to the id of the user I was logged in as.
10 years ago
This doesn't make sense as SecuritySuite doesn't apply to users with no groups. We may need to do a screen share to see what's going on. Would you be open to that?
10 years ago
Yes, I'm open to do a screen share.
10 years ago
We worked on this via email/screen share and found that something external to SecuritySuite was causing issues.