Bug mass update role and deleting contact

[gribs]

Hi
I want to disable mass update and merge for all users but admin, how to do this ?
+ there is a bug, in user role "assignation permission" is set to "no" but with mass update users can assign permission

Also, there is a problem, I have an user with "delete" right to "no" for contacts but who could remove his contacts (created by him)
I want that he cannot remove any contact (his owns too), how to fix this please?

thanks

[gribs]

Another bug, user role is set to "own" to modify contacts but user with this user role can modify all contacts (not only their)

I use latest versions (adv pack & core)

[yuri]

Hi

1. assignation permission issue will be fixed.

2. is it as it was designed. So if user created an entity by a mistake then one is able to remove it.

/application/Espo/Core/Acl/Base.php.
remove or comment the method checkEntityDelete

3. I can't reproduce. Maybe you didn't clear cache after some changes in access control settings?

[gribs]

Hi,

1. ok, for merging also ? (capacity to disable mass update and merge for certain users)

2. works ! thank you

3. sorry you are right

[yuri]

With merge it works the same as with regular save.