[Vtigercrm-developers] Lazy question on webservices.

[Adam Heinz]

On Tue, Sep 25, 2012 at 2:03 AM, Vikas Jain <vikas at vtiger.com> wrote:
> Your point seems to be valid and these fields should be allowed to be
> updated from REST, I'm trying to think of
> use cases that might be affected by allowing this displaytype 2 fields to be
> updated and their consequences.

I think this just a specific case of the more general field access
problem.  If displaytype were on vtiger_profile2field instead of
vtiger_field, Alan could easily create a new user+role+profile with
the necessary permissions.