<div dir="ltr">Sreenivas,<div><br></div><div>Thank you for your answer. But I think there is a digression from Vtiger 5 to Vtiger 6.</div><div><br></div><div><u>Here a use case:</u></div><div>Vtiger CRM is used for a company called "MyBigCompany International" which is composed by several branches:</div>
<div>- Branch 1: MyBigCompany London</div><div>- Branch 2: MyBigCompany Paris</div><div>- Branch 3: MyBigCompany New York</div><div>Theses branches <b>never communicate together</b> and we do not want, for example, an user from MyBigCompany London assigns a record to users from MyBigCompany Paris.</div>
<div><br></div><div>To filter data, it is necessary to set modules to <b>private mode</b>. Given, <u>private mode uses Groups to filter records</u>, you have to create several groups (1 group by branch):<br></div><div>- Group 1: MyBigCompany London</div>
<div>- Group 2: MyBigCompany Paris</div><div>- Group 3: MyBigCompany New York</div><div class="gmail_extra"><br></div><div class="gmail_extra">If I follow your method, I create also 3 roles:<br></div><div class="gmail_extra">
<div>- Role 1: Role for MyBigCompany London</div><div>- Role 2: Role for MyBigCompany Paris</div><div>- Role 3: Role for MyBigCompany New York</div><div><img src="cid:ii_1435862d7e0520ee" alt="Images intégrées 5"><br></div>
<div><br></div><div><br></div><div>However, as <u>the assignment system uses Roles rather than Groups</u>, it is possible to assign a record to<b> every groups</b>.</div><div><br></div><div><img src="cid:ii_14358586de36dc1e" alt="Images intégrées 4"><br>
</div><div><i>(Demo user is in the group "MyBigCompany London" and has the role "Role for MyBigCompany London")</i></div><div><br></div><div><br></div><div>I think it is a <b>security vulnerability in Vtiger 6.</b> But this problem does not exist in Vtiger 5, given the assignment system uses Groups.</div>
<div><br></div><div><div dir="ltr"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.727272033691406px;background-color:rgb(255,255,255)"><div><br></div><div>Regards,</div><div><br></div><div><div>
<font color="#666666">Jonathan SARDO</font></div><div></div><div style="color:rgb(136,136,136)"><img src="cid:ii_13df029e6cb01b67" alt="Images intégrées 5"><br></div></div></div></div></div>
<br><br><div class="gmail_quote">2014/1/3 Sreenivas Kanumuru <span dir="ltr"><<a href="mailto:svk@vtiger.com" target="_blank">svk@vtiger.com</a>></span><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Jonathan,<div><br></div><div><div class="im"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<i>I would like to create two groups: Company1 and Company2. Data will be well filtered for each companies, but members of Company1 will be able to assign records to members of Company2. Is it possible to add this choice into the Role Edit View: User can assign records to users with same group?</i></blockquote>
<div><br></div></div><div>A user can belong to multiple groups. So, "<i>User can assign records to users with same group" </i>choice might not be appropriate.</div><div><br></div><div>In your case, It is better to create two different roles at the same level. Role 1 for Company1 and Role 2 for Company2. Users with Role1 will only be able to assign records to users in their company using the "Users having same role or subordinate roles' setting. <br>
</div></div><div><br></div><div>Regards,</div><div>Sreenivas</div><div class="gmail_extra"><br clear="all"><div><div><br></div></div>
<br><br><div class="gmail_quote"><div><div class="h5">On Wed, Jan 1, 2014 at 5:10 PM, Jonathan Sardo <span dir="ltr"><<a href="mailto:sardoj@gmail.com" target="_blank">sardoj@gmail.com</a>></span> wrote:<br></div></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div class="h5">
<div dir="ltr"><div>Prasad,</div><div><br></div><div>Thanks for the explanation. It sounds good!</div><div>But, for several reasons, if I want to manage two companies with the same CRM?</div><div><br></div><div>I would like to create two groups: Company1 and Company2.</div>
<div>Data will be well filtered for each companies, but members of Company1 will be able to assign records to members of Company2.</div><div><br></div><div>Is it possible to add this choice into the Role Edit View: User can assign records to users with same group?</div>
</div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-size:12.727272033691406px;font-family:arial,sans-serif"><div><br></div><div>Cordialement,</div>
<div><br></div><div><div><div><font color="#666666">Jonathan SARDO</font></div><div></div><div style="color:rgb(136,136,136)"><img src="cid:ii_13df029e6cb01b67" alt="Images intégrées 5"><br></div></div><div style="color:rgb(136,136,136)">
<span style="color:rgb(0,0,0);font-family:arial;font-size:small">Tél. <a value="+33699455047" style="color:rgb(17,85,204)">06 99 45 50 47</a></span></div></div></div></div></div>
<br><br><div class="gmail_quote">2014/1/1 Prasad <span dir="ltr"><<a href="mailto:prasad@vtiger.com" target="_blank">prasad@vtiger.com</a>></span><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><div>
<div dir="ltr">The configuration for the respective role determines the assignment control now.<div>Review <a href="https://wiki.vtiger.com/vtiger6/index.php/August_2_Highlights" target="_blank">https://wiki.vtiger.com/vtiger6/index.php/August_2_Highlights</a><br>
</div><div><br></div><div>Regards,</div><div>Prasad</div><div><div><div><br></div><div> </div></div></div></div><div class="gmail_extra"><br clear="all"><div><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><b>Connect with us on: </b><a href="http://twitter.com/vtigercrm" style="color:rgb(0,0,204)" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" style="color:rgb(0,0,204)" target="_blank">Facebook</a> <b>I</b> <a href="https://blogs.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" style="color:rgb(0,0,204)" target="_blank">Wiki</a> <b>I </b><a href="https://discussions.vtiger.com" style="color:rgb(0,0,204)" target="_blank">Forums </a><b>I</b> <a href="https://www.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Website</a></span></div>
<br><br><div class="gmail_quote"><div><div>On Wed, Jan 1, 2014 at 4:03 PM, Jonathan Sardo <span dir="ltr"><<a href="mailto:sardoj@gmail.com" target="_blank">sardoj@gmail.com</a>></span> wrote:<br></div></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div>
<div dir="ltr"><div>Hello,</div><div><br></div><div>There still is a problem with security permissions.</div><div><br></div><div>When a module is "Private", data are well filtered and only members of a same Group can see it.</div>
<div>However, a user can assign an entity to everybody regardless of Roles or Groups.</div><div><br></div><div>Please, reopen this ticket: <a href="http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7806" target="_blank">http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/7806</a></div>
<div><br></div><div>Screenshot:</div><div><img src="cid:ii_1434d5689252054a" alt="Images intégrées 1" width="200" height="145"><br></div><div><br></div><div><div dir="ltr"><div style="color:rgb(34,34,34);font-size:12.727272033691406px;font-family:arial,sans-serif">
<div>Regards,<br></div><div><br></div><div><div><font color="#666666">Jonathan SARDO</font></div><div></div><div style="color:rgb(136,136,136)"><img src="cid:ii_13df029e6cb01b67" alt="Images intégrées 5"><br></div></div>
</div>
</div></div>
</div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div></div>
<br>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div></div>