Major security issue

[mhoang]

Hi all,

We recently upgraded to 4.0.0 and something weird happened. Some of our team members are seeing all modules and have access to the whole system. I've reviewed the security of the role and it was setup correctly. For example, we have 2 people who both have the same role and level of access. However 1 is seeing all modules, the other one only seeing what's been set in the system.

I don't know what's the issue and how to fix this. We have sensitive information that we do not want to share with everyone.

[jcortes0309]

Some people mentioned having problems with the access level. Try upgrading to the latest version as yuri made some updates to the code that should have fixed this issue. You can find the upgrade packages here - http://www.espocrm.com/download/upgrades/

[yuri]

Hi,

Please upgrade to 4.0.5.