by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Cancel at any time!
Free Trial

#1211 - History / View Summary shows records of ALL security groups, not only the current security group

Closed Bug? created by menno 5 years ago

Suitecrm ; all versions, including 7.10. All fresh installation (no upgrade) I have accounts that are part of more then 1 securitygroup.

When I login as user of a specific securitygroup: in Accounts-History listview I see the right calls (only calls of users in that securitygroup) But in Account-History-View Summary I see ALL calls of all security groups (also calls of other security groups !!) Is there a workaround / fix for this ?

There is a SuiteCRM topic with same name. They suggested to post it also on this place.

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    5 years ago

    Is this with the paid for version of SecuritySuite or with what is included in SuiteCRM?

  2. menno member avatar

    menno

    5 years ago

    It is with the securitysuite that is included in SuiteCRM. I have tested it in different versions of SuiteCRM 7.5 / 7.10. All version give this wrong information.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      5 years ago

      Thanks. I'll dig in and follow up when I have more.

  3. pgr member avatar

    pgr

    5 years ago

    I'm commenting here just to watch this thread and get notified of updates. Thanks.

  4. eggsurplus member avatar

    eggsurplus Provider Affiliate

    5 years ago

    I have created a pull request for this issue: https://github.com/salesagility/SuiteCRM/pull/6035

    Thank you for reporting this.

    • menno member avatar

      menno

      5 years ago

      Thank you for your fast actions !

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      5 years ago

      Happy to help! I can see why most wouldn't run into this issue. Rarely are there actions on a same account that shouldn't be made known to other users. Either way, glad this will not happen going forward. Closing this out for now. Feel free to follow up as needed.

  5. menno member avatar

    menno

    5 years ago

    I am not familiar with this kind of things. I see some changes in modules/activities.pickup_picker.php (for suitecrm 7.10.6 ?) . But is this all I have to change??

  6. menno member avatar

    menno

    5 years ago

    And in SuiteCRM 7.10.7 I don't see a bugfix for it..

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      5 years ago

      They just accepted the pull request this week. Perhaps it will be in 7.10.8.

      Yes, all that needs to be changed is what you see in that single file in the pull request. You can copy/paste from that pull request directly into your version of the file.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
Rating
  • "The add-on itself was already a must for my SuiteCRM, which was missing this very important security feature. However, what surprised me the most was ..." - Davint

    Read More Reviews