[Vtigercrm-commits] [Vtiger development] #7273: No Validation on Mass Edit of records which doesn't have write permission.

[Vtiger development]

#7273: No Validation on Mass Edit of records which doesn't have write permission.
------------------------+---------------------
 Reporter:  vikash      |       Owner:  manu
     Type:  defect      |      Status:  closed
 Priority:  unassigned  |   Milestone:  6.4.0
Component:  vtigercrm   |     Version:  5.3.0
 Severity:  Medium      |  Resolution:  fixed
 Keywords:              |
------------------------+---------------------
Changes (by prasad):

 * status:  assigned => closed
 * resolution:   => fixed


Old description:

> Steps To Reproduce :: 1)Log in as admin user and create one user with one
> role.
> 2)Create some records in Leads module.
> 3)The module(Leads) should be private for admin user also,Keep in mind
> that global privileges i.e. select all and view all should be disabled
> from the profile of that user(non-admin user)
> 4)Now,give the non-admin user the privilege for lead module with the
> permission as read only.
> 5)Log in non-admin user and go to leads module.
> 6)Select some record and click on Mass Edit and try to make some changes
> in any field for e.g .in company field.
> 7)Actually it will not save the changes made but it should show some
> alert box with the message that the user is not permitted to do so.

New description:

 Steps To Reproduce :: 1)Log in as admin user and create one user with one
 role.
 2)Create some records in Leads module.
 3)The module(Leads) should be private for admin user also,Keep in mind
 that global privileges i.e. select all and view all should be disabled
 from the profile of that user(non-admin user)
 4)Now,give the non-admin user the privilege for lead module with the
 permission as read only.
 5)Log in non-admin user and go to leads module.
 6)Select some record and click on Mass Edit and try to make some changes
 in any field for e.g .in company field.
 7)Actually it will not save the changes made but it should show some alert
 box with the message that the user is not permitted to do so.

--

Comment:

 Changeset [14510]

--
Ticket URL: <http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7273#comment:3>
Vtiger development <http://trac.vtiger.com/>
Vtiger CRM