Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.
FAQ
- Custom module not showing in Hookup Tool
- Users cannot see the Security Groups subpanel
- How should a non-admin user be set up to assign groups to records?
- What does "Not Inheritable" mean?
- Why do I get the following error when I try to install SecuritySuite:"The uploaded file is not compatible with this version of Sugar: x.x.xx"?
- How do I resolve the following error on the ListView "MySQL error 1109: Unknown table 'SecurityGroups' in order clause"?
My custom module isn't showing in the Hookup Tool
If you haven't already done the hookup for your custom module then this is due to a bug in SuiteCRM. To resolve follow these steps:
- Edit the vardefs.php for that module
- Remove 'security_groups' from the VardefManager::createVardef call
- Run Quick Repair & Rebuild a couple of times
- Go to Admin->Hookup Module
- Choose your module and click OK
- Run Quick Repair & Rebuild for good measure
Any newly created modules after SecuritySuite gets installed will not have this problem.
Users cannot see the Security Groups subpanel
Run Admin->Repair->Repair Roles then go to the different roles that you have created and set the Security Groups Management row to All (or Group) as appropriate for each cell. Any users currently logged in will have to log out and back in for the changes to be applied.
How should a non-admin user be set up to assign groups to records?
It depends on what groups the user should be able to assign. If the user can only assign groups that user is a member of:
- Access: Enabled
- Delete: None
- Edit: None
- Export: None
- Import: None
- List: Group
- View: None
If user can assign any group set List to All
What does "Not Inheritable" mean?
There are two places where this field can be found. The first is on the group itself. If the "Not Inheritable" field is checked then the group will not automatically be attached to any record. This can be useful for cases such as creating groups to assign roles to.
The second place where the "Not Inheritable" checkbox can be found is in the Users subpanel within a group. The meaning is similar here. If the checkbox is checked that group will not inherit for that user. This can be set by clicking on the "edit" link on the appropriate row in the Users subpanel. An example use case is when a manager needs to be able to view a group's activity but the group shouldn't see the manager's activity. By checking "Not Inheritable" the group will not automatically be assigned to any record that the manager creates.
Why do I get the following error when I try to install SecuritySuite:"The uploaded file is not compatible with this version of Sugar: x.x.xx"?
Data security is complex by nature. To ensure that your data remains secure core code changes have been made. Any SuiteCRM upgrade will overwrite some, if not all, of these core code changes leaving confidential data available to users who should not have access to that data. To prevent that the version of SecuritySuite being installed must match the version of SuiteCRM that is installed.
How do I resolve the following error on the ListView "MySQL error 1109: Unknown table 'SecurityGroups' in order clause"?
This error may occur on a Linux bases server due to the way SuiteCRM creates queries on Linux. To resolve this error please make sure that the MySQL variable lower_case_table_names is set to 1. To find if lower_case_table_names is set to 1 run the following query against your MySQL database:
show global variables like 'lower_case_table_names';
See http://dev.mysql.com/doc/refman/5.0/en/identifier-case-sensitivity.html for more information.