[Vtigercrm-developers] Outlook plugin - Security Issue

cryptic mark at markcox.co.uk
Fri Jul 17 13:09:56 GMT 2015


Despite disabling export functionality for the Sales Profile users whose role
is set to Sales Profile are able to are copy contacts from vTiger to Outlook
using the Outlook plugin. Once the contacts are in Outlook users can easily
export all the contact records from Outlook. There appears to be no security
setting to prevent a user from exporting all the contact records they have
access to in vTiger via the Outlook plugin. This is particularly troubling
if Sharing Access is set to Public. 

Surely vTiger should reconsider the designer of the Outlook plugin. At
present there is no way to prevent an user from exporting all the contacts
they have access to if they download and install the Outlook plugin.



--
View this message in context: http://vtiger-crm.2324883.n4.nabble.com/Outlook-plugin-Security-Issue-tp16948.html
Sent from the vtigercrm-developers mailing list archive at Nabble.com.


More information about the vtigercrm-developers mailing list