Tweet
If a user tries to change a record which he has no permission to (defined by a role) the Save button is still visible and pressing it throws a 403 error without any further explanation.
-
------------------
Robert Laussegger
iscon group
http://www.iscongroup.net
mailto://info@iscongroup.net -
Question: How you reach the edit view? Usually Edit button should be hidden.If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks. -
Not sure why this is the case. I have set up two roles and two teams - one admin/admin, the second user/user. Standard teams are set, roles are assigned to teams. Problem 1: Sometimes the team is not assigned to the record. Problem 2: Even though team user are only allowed to change records of its own team the edit buttons appear. You may try - I will send you the access data via skype------------------
Robert Laussegger
iscon group
http://www.iscongroup.net
mailto://info@iscongroup.netComment
-
It happens because information about selected teams is loaded after page is rendered. Not sure how to fix it so that it won't affect on performance. Will think .If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.Comment
-
Maybe initially set display:none for edit button, and then only have refreshing teams/role info, set visible?Comment
-
Bad idea. Teams should be loaded not always.If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.Comment
Comment