[Vtigercrm-developers] Assign record to a User and a Group simultaneously
Alan Lord
alanslists at gmail.com
Fri Dec 11 09:14:42 GMT 2020
FWIW, I had a similar issue with a customer that has lots of users
(>600). They ended up with a huge "tree" of Roles and it was a nightmare
to manage. Essentially there were only about 6 roles needed but because
groups of users were split into distinct teams (and records are mostly
private within each team), they had to create a complete role hierarchy
for each team. Then when users moved teams it was a pain to re-organise
all the users.
So after a lot of discussions back and forth, what we designed and
implemented actually ended up being fairly simple but pretty cool.
I added a "Team" multi-select picklist to the User module. This has say
30 options called things like "Team 1", "Team 2" .. "Team 30" etc.
When a User has a Team (or more than one team) defined (it can be left
blank), they only have access (based on existing Role, Profile and
Sharing Rules) to records in the Role hierarchy but ALSO ONLY within
their own Team(s). If you leave the Team picklist blank then they have
visibility across _all_ teams, but still only within their Role permissions.
We ended up going from something like 400 Roles down to 6 and it is much
easier to manage. We added the Team picklist to the User List View as
well so it's easy to find users within a Team.
In the implementation, it actually only required a few fairly small
modifications to the core code to work.
It's now been in production for nearly 2 years and working well.
Maybe this is an idea you could use in some way.
HTH
Al
On 11/12/2020 08:42, Martin Allen wrote:
> I think it is possible to achieve what you want using the existing
> functionality - but it would require lots of branch specific users /
> roles etc to do so. (and some good Administrators to maintain it!)
>
> I would create branch specific Roles, for each of the branch Users. Each
> head office User, also has a branch specific User (one for each branch,
> as well as their main User). Each Head Office User also has a group
> (containing their main User and all their branch specific Users) and
> then sharing access custom privileges that gives access to records
> assigned to any member of that group to all the other members of that
> same group.
> Then for each branch specific head office User, a customer privilege
> sharing access rule that gives permission to access for all other roles
> of that same branch.
>
> As the number of Roles / Users / Branches increases it exponentially
> gets worse to administer, but it's certainly possible
>
> ;)
>
> Martin Allen
>
> *01392 248692 - Main Office
> 01392 690659 - Direct Line*
>
> *signature2*
>
> Have you visited our website recently? https://www.clystnet.com
> <http://www.clystnet.com/>
>
>
> The information in this email is confidential If you are not the
> intended recipient, you must not read or use that information. This
> email and any attachments are believed to be virus free however no
> responsibility is accepted by Clystnet for any loss or damage arising in
> any way from receipt or use thereof. Clystnet Ltd (company reg number
> 7164503) is based at Silverdown Park, Fair Oak Close, Clyst Honiton, EX5 2UX
>
>
>
> On Fri, 11 Dec 2020 at 03:10, Tony Sandman <tonysandman999 at gmail.com
> <mailto:tonysandman999 at gmail.com>> wrote:
>
> Multi User Assignment has two major disadvantages:
>
> 1. It dont delete groups automatically when no records are assigned
> to a group (it could allow for a lot of mess within groups - but
> that depending on scenario)
> 2. Dont respect profile settings:
> a) users can see all other users even if their profile does not
> allow that
> b) disabling module in profile settings does not bring any effect.
> Still accessible for users
>
> There is another vte extension called Advanced Custom field which
> allows for additional "assigned to" fields, however it has nothing
> to do with access privileges
>
> vte - sorry guys for comment, but it may safe hassle for developers
> and their clients
>
> On Wed, Sep 27, 2017 at 2:09 AM Oleg Antonov <oleg.a at pinstudio.ru
> <mailto:oleg.a at pinstudio.ru>> wrote:
>
> Alexander, thank you for your answer, but It is not enough for
> my case.
>
> Maybe someone can help with other task. How one can make a
> report for all records related to all groupmembers without
> listing then?
> If there is condition like "asigned to" = "groupname", only
> records assigned to the group itself are processed, but the ones
> related to group members are not.
>
> El El mar, 12 sept 2017 a las 21:00, Alexander Allen Z
> <alexander.allenz at gmail.com <mailto:alexander.allenz at gmail.com>>
> escribió:
>
> In first instance I think that to assing a record for user
> and group simultaneously is not possible because this
> information save on a crmentity wich has an owner id wich is
> one number.
>
> But you can achieve it givin speciall access for records
> based on roles.
>
> Alexander Allen
>
>
> 2017-09-12 10:58 GMT-06:00 Oleg Antonov <oleg.a at pinstudio.ru
> <mailto:oleg.a at pinstudio.ru>>:
>
> Hi!
>
> Does anyone have situation were record must be assigned
> to a User and a Group simultaneously? Any advise how to
> achieve it?
>
> My situation is here.
> There is head company with few departments, for example
> Marketing, Accounting and Management. And local offices
> with Sales managers. Local offices can't see records of
> each other, head office can. Local offices want to have
> ability to assign Customer to someone from head office,
> and still have access to the record.
> And management wants to have filters and reports related
> to each office separately.
>
> --
> Oleg Antonov
> http://pinstudio.ru <http://pinstudio.ru/>
>
> _______________________________________________
> http://www.vtiger.com/
>
>
> _______________________________________________
> http://www.vtiger.com/
>
> --
> --
> С уважением, руководитель веб-студии PIN
> Антонов Олег.
> +7-921-922-91-91
>
> http://pinstudio.ru <http://pinstudio.ru/>
> - Создание и продвижение сайтов
> - Автоматизация бизнеса
> - Увеличение продаж
>
> _______________________________________________
> http://www.vtiger.com/
>
> _______________________________________________
> http://www.vtiger.com/
>
>
> _______________________________________________
> http://www.vtiger.com/
>
More information about the vtigercrm-developers
mailing list