by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Free 30 day trial
Try it Now

#2700 - Filter Users avoiding whom is on Non Inheritable Groups

Closed Feature created by Lion Solution Verified Purchase a year ago

Hi,
i'm using the ENHANCED package.

I already activated the "Filter User List" option.

How is it possible (ie in advanced search Assigned User field) to avoid to see Users that are in a same Group but with the "Not Inheritable" flag on?

I mean: i want that lower level Users aren't able to
see shared calendar of
nor
to assign activities to
higher level Users.

Thanks in advance,

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    a year ago

    Hello,

    The "Not Inheritable" flag is for determining whether a group should get assigned to a record when a record gets created.

    To limit users' views of other users not in their groups use the Role grid and set the List and View columns to Group so that they only see themselves and others in their group.

    You may also want to set the Shared Calendar - Hide Restricted setting on the SecuritySuite Settings page so that only items that a user has access to will show on the Shared Calendar. Filter User List is another setting that sounds like should be set in your case.

    Hope this helps!

    • MayerElyashiv member avatar

      Lion Solution Verified Purchase

      a year ago

      Thank you very much.
      This is the scenario:

      • Group #1
      • Group #2
      • Group #3

      Users of Group #1 can see its records, Group #2 records and Group #3 records
      Users of Group #2 can see its records and Group #3 records
      Users of Group #3 can see just its records

      I assigned all records to Group 3.
      Then i assigned the group users of Group #1 and of Group #2 also to group #3, but i set their membership as Not Inheritable. This way when a group 2 user creates a record it does not also add group 3.
      I assigned the group users of Group #1 also to Group #2 but i set their membership as Not Inheritable. This way when a group 1 users creates a record it does not also add group 2.

      Is it possible, and if yes, how, for a User in Group #2 to see only Users of Group #2 and Group #3
      and for a User in Group #3 to see only Users of Group #3
      ?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      a year ago

      It sounds like you have a bit of a custom need here. I don't have a solution for your need, but the spots to check are in /include/utils.php in the get_user_array(), getUserArrayFromFullName(), and get_bean_select_array() functions. I believe it is the first function there that controls what users show in the user select and the second function is for doing the autocomplete search. It's been awhile though so it'll require some debugging to figure out exactly where to do your logic in.

    • MayerElyashiv member avatar

      Lion Solution Verified Purchase

      a year ago

      Do you think is there an upgrade safe way of overriding those functions
      get_user_array()
      and
      getUserArrayFromFullName()
      in include/utils.php ?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      a year ago

      Unfortunately there is not.

  2. eggsurplus member avatar

    eggsurplus Provider Affiliate

    a year ago

    Closing this out. Unfortunately we cannot address this specific need.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
Rating
  • "The add-on itself was already a must for my SuiteCRM, which was missing this very important security feature. However, what surprised me the most was ..." - Davint

    Read More Reviews