<div dir="ltr"><div><div>As of my understanding on your problem these are my views on how system should work.<br><br></div><b>Scenario: </b> <br><br> Notation: U ≡ User; G ≡ Group</div><div><ul><li>U1 ∈ G1, U2 ∈ G2</li>
<li>G2 <span>⊂ G1</span></li><li><span>In Sharing access you made </span> organizations module as a private. which means any user can access his own records and his subordinates' (Users under him. Not at same level).</li>
</ul><p>In this case U1 can access records assigned to <br></p><ul><li>Own records</li><li>Group G1</li><li>Users under him (No need to be in same group)</li></ul><p>And U2 can access records assigned to <br></p><ul><li>
Own records</li>
<li>Groups G1,G2</li><li>Users under him (No need to be in same group)</li></ul><p>Now the question:</p><p>Can U1 Access the records of U2 ?</p><p>It depends on sharing access. U2 < U1 then he can. The same thing will happen in case of U2.</p>
<p>If System is not acting above it is a bug.</p><p>Any one can correct me if any point wrong.</p><p>ThankYou<br></p></div><span></span><div>
<div><div><br><br></div></div></div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr">Regards,<br>Mani<br><a href="http://www.vtiger.com" target="_blank">Vtiger Team</a></div></div>
<br><br><div class="gmail_quote">On Wed, Mar 5, 2014 at 2:57 PM, Siam Translations LLP <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div><div><div><div><div><div><div><div>Waiting for contribution in this thread I tested another configuration of groups and sharing privileges.<br></div>To reproduce my steps see below:<br><br></div>1. Created group G1<br>
</div>2. In sharing rules made organizations module as a private<br></div>3. Assigned few organizations to the group G1<br></div>4. Created group named G2 where I assigned user named USER1<br></div>5. Get to the group G1 and insert G2 as a member of G1<br>
<br></div>Result is that USER1 can not see records assigned to G1. Could you guys please tell me if this is OK? Is this the way the groups working? Previously Uma says it is ok that visibility is out of control (read thread) now here is no access to records :-) I will appreciate any comment eventually confirmation that it working somewhere else differently. <br>
<br></div>Regards<br></div>Andrew Smith<br><div class="gmail_extra"><br>
<br><br><div class="gmail_quote">On Tue, Mar 4, 2014 at 2:31 PM, Siam Translations LLP <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
In my opinion it going too deep. visibility suppose to be limited to group only not group and user. If this is not bug it is incorrect design than.<br>
What if user belonging to more groups? Why member of one group should see documents of other group created by particular user?<br>
On the other word: it like I am an employee of vTiger team, but my wife not - doesn't it?<br>
Group vTiger and Group Family should be separated or not?<br>
I allow that I am wrong of course therefore I would like to ask forum guys to issue own opinion.<br>
<br>
Regards<br>
Andrew Smith<div><div><br>
<br>
<br>
<br>
<br>
On 2014-03-04 14:16, Uma S wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
Hi,<br>
<br>
This is not a bug. As you explained even-though documents module is<br>
private, We have custom sharing rule saying documents assigned to<br>
Group B can be accessed by Group A Read only. As User 1 is part of<br>
Group A and User 2 is part of Group B. If User 1 logged in, He can see<br>
all records assigned to Group B and User 2.<br>
<br>
On Sun, Mar 2, 2014 at 7:56 AM, Siam Translations LLP<br>
<<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>> wrote:<br>
<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
State:<br>
<br>
Group A - User 1<br>
Group B - User 2<br>
Documents module - private<br>
Sharing Rule - Documents of Group B can be accessed by Group A Read<br>
Only.<br>
All users having Subordinate Role on the same level<br>
<br>
Bug:<br>
<br>
Logged User 1 can see all documents assigned to Group B AND to User<br>
2<br>
Visibility in line with sharing rules should be limited only to<br>
documents assigned to Group B<br>
or I am missing something?<br>
<br>
Regards<br>
Andrew Smith<br>
<br>
______________________________<u></u>_________________<br>
</div></div><a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a> [1]<br>
</blockquote><div>
<br>
--<br>
<br>
With<br>
Best Regards<br>
Uma.S<br>
<br>
Vtiger Team<br>
<br></div>
Links:<br>
------<br>
[1] <a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br>
<br>
______________________________<u></u>_________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br>
</blockquote>
<br>
</blockquote></div><br></div></div>
<br>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>