<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><i><span style="font-family:arial,sans-serif;font-size:12.727272033691406px">Sreenivas, setup user at the bottom of roles tree and fire: </span><a href="http://www.yourdomain/yourcrm/index.php?module=Users&view=List" target="_blank" style="font-family:arial,sans-serif;font-size:12.727272033691406px">www.yourdomain/yourcrm/index.php?module=Users&view=List</a><span style="font-family:arial,sans-serif;font-size:12.727272033691406px"> <br>
</span><span style="font-family:arial,sans-serif;font-size:12.727272033691406px">... and you will see list of all users :-)</span></i></blockquote><div><br></div><div>Yep, it does reveal the names of other users that have higher role as well than the logged in user. We will include a fix for this when the next security patch is released.</div>
<div><br></div><div>Regards,</div><div>Sreenivas</div></div><div class="gmail_extra"><br clear="all"><div>--<br>Sreenivas Kanumuru<br>vtiger Team<div><div><br></div><div>Direct: +91 96323-55656<br>Skype: skanumuru</div><br>
<b>Connect with us on: </b><a href="http://twitter.com/#%21/vtigercrm" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" target="_blank">Facebook</a> <b>I</b> <a href="http://blog.vtiger.com/" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" target="_blank">Wiki</a> <b>I </b><a href="http://forums.vtiger.com/" target="_blank">Forums </a><b>I</b> <a href="http://vtiger.com/" target="_blank">Website</a><br>
</div></div>
<br><br><div class="gmail_quote">On Mon, Mar 17, 2014 at 3:54 PM, Sreenivas Kanumuru <span dir="ltr"><<a href="mailto:svk@vtiger.com" target="_blank">svk@vtiger.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div style="color:rgb(48,48,48);font-family:Verdana,Tahoma,Arial,sans-serif;font-size:10.666666984558105px"><p>Jonathan, i see your point. We have these choices currently in the Role - Assigned To Setting.</p>
<p>1 - All users<br>2 - Users with same role or subordinate role<br>3.- Users with subordinate role</p><p>For options #2 and #3, we should only allow them to assign to groups that do not have any higher role members. We will fix this in next version.</p>
<p>Regards,</p><p>Sreenivas</p><div><br></div></div></div><div class="gmail_extra"><div class=""><br clear="all"><div>--<br>Sreenivas Kanumuru<br>vtiger Team<div><div><br></div><div>Direct: <a href="tel:%2B91%2096323-55656" value="+919632355656" target="_blank">+91 96323-55656</a><br>
Skype: skanumuru</div><br>
<b>Connect with us on: </b><a href="http://twitter.com/#%21/vtigercrm" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" target="_blank">Facebook</a> <b>I</b> <a href="http://blog.vtiger.com/" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" target="_blank">Wiki</a> <b>I </b><a href="http://forums.vtiger.com/" target="_blank">Forums </a><b>I</b> <a href="http://vtiger.com/" target="_blank">Website</a><br>
</div></div>
<br><br></div><div class="gmail_quote"><div><div class="h5">On Mon, Mar 17, 2014 at 3:35 PM, Jonathan Sardo <span dir="ltr"><<a href="mailto:sardoj@gmail.com" target="_blank">sardoj@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">
<div dir="ltr">Sreenivas,<div><br></div><div>It's true for users, but the problem exist with groups.</div><div>A user can assign data to all groups. I think it is a security hole.</div><div class="gmail_extra"><div><div dir="ltr">
<div style="color:rgb(34,34,34);font-size:12.727272033691406px;font-family:arial,sans-serif"><div><br></div><div>Regards,</div><div><br></div><div><div><font color="#666666">Jonathan SARDO</font></div>
<div></div><div style="color:rgb(136,136,136)"><img src="cid:ii_13df029e6cb01b67" alt="Images intégrées 5"></div></div></div></div></div>
<br><br><div class="gmail_quote">2014-03-17 10:57 GMT+01:00 Sreenivas Kanumuru <span dir="ltr"><<a href="mailto:svk@vtiger.com" target="_blank">svk@vtiger.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
<div dir="ltr">In Vtiger 6, In Role Settings, for users with a given role, you can choose whether to show all users in Assigned To list or only users with same or below role.<div><br></div><div>Regards,</div><div>Sreenivas<br>
<div><br></div><div><br></div></div></div><div class="gmail_extra"><br clear="all"><div>--<br>Sreenivas Kanumuru<br>vtiger Team<div><div><br></div><div>Direct: <a href="tel:%2B91%2096323-55656" value="+919632355656" target="_blank">+91 96323-55656</a><br>
Skype: skanumuru</div><br><b>Connect with us on: </b><a href="http://twitter.com/#%21/vtigercrm" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" target="_blank">Facebook</a> <b>I</b> <a href="http://blog.vtiger.com/" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" target="_blank">Wiki</a> <b>I </b><a href="http://forums.vtiger.com/" target="_blank">Forums </a><b>I</b> <a href="http://vtiger.com/" target="_blank">Website</a><br>
</div></div><div><div>
<br><br><div class="gmail_quote">On Sun, Mar 16, 2014 at 5:27 PM, Siam Translations LLP <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">User which cant assign anything to the parent users (Users having Same Role or Subordinate Role)<br>
Can anyway see all other users what might be not coveted in some organizations ... index.php?module=Users&view=<u></u>List<br>
<br>
Regards<br>
Andrew Smith<br>
______________________________<u></u>_________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br>
</blockquote></div><br></div></div></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>
</blockquote></div><br></div>