[Vtigercrm-commits] [vtiger development] #7806: A user can assign an entity to all other users and groups

[vtiger development]

#7806: A user can assign an entity to all other users and groups
-----------------------+----------------------------------------
 Reporter:  sardoj     |      Owner:  developer
     Type:  defect     |     Status:  new
 Priority:  critical   |  Milestone:  6.0.0
Component:  vtigercrm  |    Version:  6.0.0 Beta
 Severity:  Critical   |   Keywords:  user,assign,access,private
-----------------------+----------------------------------------
 1- Set Organizations & Contacts access right to "Private".
 2 - Create a new group "Group1"
 3- Create an other group "Group2"
 4- Create an user "User1" and put it in the "Group1"
 5- Create an other user "User2" and put it in the "Group2"
 6- Disconnect from Vtiger and connect with "User1"
 7- Go to the "Organizations" EditView

 User1 can assign the entity to : User1, User2, Group1, Group2 and all
 other users and groups

 There is the same issue with all other private modules.

--
Ticket URL: <http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7806>
vtiger development <http://trac.vtiger.com/>
vtiger CRM