Assigned Users & Privacy

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • esforim
    Active Community Member
    • Jan 2020
    • 2204

    Assigned Users & Privacy

    v8.2+

    OK, how do people fix this issue? It seem that I must give the User Roles team access for them to assigned to other team member.

    But if you do this, the Users can look at many information they should not be privilege to know when they look at other users. The steam reveal information that they should not see, the Roles/Group also reveal other user privilege as well. Does anyone notice this issue? I have feeling I'm setting up EspoCRM incorrectly.

    Here some screenshot to show you what I mean.

  • esforim
    Active Community Member
    • Jan 2020
    • 2204

    #2
    Thinking of a solution, I thought. OK I will just create a Layout that hide all these field. Unfortunately it seem with Bottom Panel layout that doesn't hide it at all. Maybe I need to refresh cache.

    Which work amazingly! But Team Access & Control is still shown. Which is acceptable for now since it minimal information 'leak'.

    Comment

    • yuri
      Member
      • Mar 2014
      • 8453

      #3
      Not sure if I understood. Maybe User Permission is set to 'team'? Try setting to 'no'.
      If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

      Comment

      • esforim
        Active Community Member
        • Jan 2020
        • 2204

        #4
        Hi yuri, then that user cannot assigned another user. We need to allow them to assign other team member.

        Click image for larger version

Name:	image.png
Views:	120
Size:	7.4 KB
ID:	106561

        Comment


        • esforim
          esforim commented
          Editing a comment
          Could it be because I'm using "Multiple Assigned Users" and EspoCRM 8.2 not yet support this and Roles is not functioning correctly?
      • yuri
        Member
        • Mar 2014
        • 8453

        #5
        In a Role:
        • Enable User access, set 'read' to 'team'.
        • Set 'Assignment Permission' to 'team'.
        • Set 'User Permission' to 'no'.
        Then the user should be able to assign to another users of their team, but not able to view the Stream of those users.
        If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

        Comment


        • esforim
          esforim commented
          Editing a comment
          Thank you, will give it a try and report back.
      Working...