[Vtigercrm-developers] Delete Permission Calendar Issue

[cryptic]

I've just raised a defect on trac. Is there any chance this could be resolved
as a priority as at present users are able to delete records from the CRM
when they don't have permission? 

Users are able to delete opportunities, invoices, projects and project tasks
records via the calendar even when their profile is configured so that they
cannot delete those type of entities. I could remove permission to delete
calendar entries, but the popup reminders would become tiresome.

I have replicated this bug in the vTiger demo.

To replicate the defect-:

Configure a profile so that 'Delete' is unchecked for Opportunities, 
Invoices, Projects and Project tasks 
Configure a user to use that profile
Login as that user.
Create an opportunity and/or invoice, project and project task.
Go to the Calendar module. Hover cursor over the
opportunity/invoice/project/project task entry.
Click the trash icon
The opportunity/invoice/project/project task record is then deleted when
this should NOT be possible.

http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/8605#modify

Note, that I've tested this in vTiger on-demand and the issue does not
occur. It returns permission denied.



--
View this message in context: http://vtiger-crm.2324883.n4.nabble.com/Delete-Permission-Calendar-Issue-tp16978.html
Sent from the vtigercrm-developers mailing list archive at Nabble.com.