[Vtigercrm-commits] [vtiger development] #5596: a user can edit any record with the use of mass edit, although he is not having edit permission

[vtiger development]

#5596: a user can edit any record with the use of mass edit, although he is not
having edit permission
-----------------------+----------------------------------------------------
 Reporter:  nitin      |       Owner:  developer 
     Type:  defect     |      Status:  new       
 Priority:  critical   |   Milestone:  5.1.0     
Component:  vtigercrm  |     Version:  5.1.0-val1
 Keywords:             |  
-----------------------+----------------------------------------------------
 make sharing access as Public: Read Only for all the modules, now login as
 a non-admin   user, this user able to edit all the records of others with
 the use of Mass Edit without looking for the roles hierarchy.

-- 
Ticket URL: <http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5596>
vtiger development <http://trac.vtiger.com/>
vtigerCRM