[Vtigercrm-developers] Possible to limit the access to a record based on the record settings? 😅

[Sutharsan J]

Hi

I assume you need record level  sharing similar to 'manual sharing' in
salesforce. This allows the owner of a record to manually grant (share)
read or read/write access to a record to another user, group, or role

This can violate the RBAC principles if not applied properly and lead to
performance issues.  I believe this requires a core customization in vtiger.


Thanks
Sutharsan Jeganatthan

On Mon, Jun 26, 2023 at 8:41 PM socialboostdk <socialboostdk at gmail.com>
wrote:

> Hi Sutharsan,
>
> Thank you for your input!
>
> I can combine groups and sharing-rules, but would it be possible to make a
> record available to certain user groups/profiles?
>
> Ie. I need to configure what users to see it *on the record -* not for
> the group.
>
> So my example would be that I have some users working in department A, B,
> and/or C. And i want to make records available for those departments.
>
> Does the example make sense?
>
> :) Chris
>
>
> On Mon, 26 Jun 2023 at 16:34, Sutharsan J <ajstharsan at gmail.com> wrote:
>
>> Hi Chris
>>
>> Basically Groups should work with a combination of sharing rules, if you
>> have limitations of using Assigned to field to GROUPS only.
>>
>>
>> Thanks
>> Sutharsan Jeganathan
>>
>> On Mon, Jun 26, 2023 at 6:54 PM socialboostdk <socialboostdk at gmail.com>
>> wrote:
>>
>>> Hi there,
>>>
>>> I have found something that I thought was relatively easy, but perhaps
>>> is not 😨
>>>
>>> Is there any way to limit the access to a record based on the record
>>> settings?
>>>
>>> The customer use case is this:
>>>
>>>    - They have colleagues working in different departments of their
>>>    business. Lets call them Nike, Adidas, and Converse.
>>>    - A user working in Nike is allowed to see all "Nike"-related
>>>    Contacts, and a user working in Adidas is allowed to see all
>>>    "Adidas"-related contacts, etc.
>>>    - There are also users allowed to se a combination, ie Adidas + Nike
>>>    or Converse + Nike, etc.
>>>    - The contacts would perhaps have a multi-select with "Nike,
>>>    Converse" etc in them. This could also be another field/solution.
>>>
>>>
>>> How would you configure this? Is it even possible?
>>>
>>> I know sharing-rules, but those (as I see it) only allows me to use
>>> assigned-to field as the parameter, nothing else. So how would I make a
>>> Contact that can be accessed by users using either Nike or Converse?
>>>
>>> And/or Are there alternative solutions for this use-case?
>>>
>>> Thank you for any input 😅
>>>
>>> Cheers,
>>> Chris
>>> _______________________________________________
>>> http://www.vtiger.com/
>>
>>
>>
>> --
>> Development Manager
>> Radus28 Software Solution
>> [image: Radus28 Software Solution]
>> 123, Level 2, Mc Larens Building
>> Baudhaloka Mw.
>> Colombo 04
>> Sri Lanka
>> M : +94773795291
>> E  : sutharsan at radus28.com
>> W : www.radus28.com
>> _______________________________________________
>> http://www.vtiger.com/
>
> _______________________________________________
> http://www.vtiger.com/



-- 
Development Manager
Radus28 Software Solution
[image: Radus28 Software Solution]
123, Level 2, Mc Larens Building
Baudhaloka Mw.
Colombo 04
Sri Lanka
M : +94773795291
E  : sutharsan at radus28.com
W : www.radus28.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20230627/8b24683e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logo_web.png
Type: image/png
Size: 15612 bytes
Desc: not available
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20230627/8b24683e/attachment-0001.png>