by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Free 30 day trial
Try it Now

#2189 - Permissions problem

Closed Bug? created by crmadmin 3 years ago

We upgraded from 6.5.12 (yes an old one) to 6.5.23 and now the users can get to meeting details but not to the person associated with the meeting. The error they get is:
Error retrieving record. This record may be deleted or you may not be authorized to view it.
I can get to the record fine as an admin.
I did notice that a default group was added for the security group table. Could that be the problem?

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    3 years ago

    Did you upgrade SecuritySuite as well? If not, make sure to install the 6.5.23 version. You will need to run a Repair Roles and then do a Quick Repair & Rebuild just to be safe after installation. This can be found under Admin->Repair.

    Make sure that the person has rights to view all Meetings or that they have the appropriate rights to Meetings. If Group rights and they are not assigned to the meeting as the "Assigned To" then their group will need to be associated to the meeting.

    Hope this helps!

    • crmadmin member avatar

      crmadmin

      3 years ago

      I did upgrade SecuritySuite, ran the Quick Repair and Rebuild but not the Repair Roles. It looks like that might have fixed it.
      Thanks! I will do some more testing and follow up.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Glad to help! Closing this out for now, but feel free to follow up if you need anything else.

  2. crmadmin member avatar

    crmadmin

    3 years ago

    There are still issues with layouts not showing correctly for the users and still some people that are associated with meetings that we can't get in to.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      What sort of issues? With layouts, it will show either the default layout as defined in Studio or a custom layout based on the group that the user is in. You can create custom layouts for different groups in Studio by clicking on the Layouts folder for a module and copying existing layouts to a new group.

      For meetings and a given user having troubles go to the user record in Sugar and check the Access tab to see what their permissions are for Meetings. The List and View permissions will help you determine whether the meeting is set correctly for them to view it or if their roles have insufficient rights.

  3. crmadmin member avatar

    crmadmin

    3 years ago

    We have layouts defined for each of the security groups. We also have the default defined. For the meetings and the users, the permissions look fine. It appears that the link in the dashlet is bad. I can go to the person from the meeting but the link to the person in the dashlet points to a non-existing person. It looks like we can work around the meetings and users. The other issue then is the layouts. Is it possible that I will just need to recreate the layouts? Is there some way to clear the caches for those since it appears to be working for some people in a security group and not for others? BTW, thanks for the quick responses.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      If it is not working for those not in a security group then Apache may be running into a permissions issue with accessing those layouts. There should be no reason why that wouldn't work. It's possible that file permissions got slightly out of whack after upgrading. Even when permissions look right there may be a few files that are off. This is a great script to have permissions/ownership applied across the application. Adjust for your OS: http://www.shanedowling.com/sugarcrm-permissions-script/

      Thanks for the additional info on the meetings/dashlet piece. I will look at that.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Tested the meetings dashlet on a clean 6.5.23 install and it worked just fine for both meetings assigned directly to a user and for those with the user's groups associated to a meeting. It sounds like you are running into some install issues. Not sure on the best path here for you. Perhaps a clean 6.5.23, point it at a backup of your existing database, and copy the /custom directory over? Then repair/rebuild.

  4. crmadmin member avatar

    crmadmin

    3 years ago

    I ran the script that you referenced. Thanks for that. Still getting the weirdness with layouts. Any other ideas where I can look?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Can you expand on what you are seeing?

  5. crmadmin member avatar

    crmadmin

    3 years ago

    I also just rebuilt roles and it looks like at least it is consistently NOT doing the layouts correctly now. Fixed would be better than broken but the consistency at least makes it easier.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Can you please expand on what you are seeing? Makes it impossible to help without an explanation. If you want to email me at solutions@eggsurplus.com temporary admin access along with what you are seeing I can take a look.

  6. crmadmin member avatar

    crmadmin

    3 years ago

    Sorry, I thought I had sent this off yesterday.
    I am afraid that I can't send access. It is a FERPA thing. Let me see if I can explain it.
    There is a panel in our AC security group layout that is not showing up for students, which is related to Meetings. It seems now, that no one in that security group can see the panel in question. Is this something I should just rebuild? I can do that.
    Thanks

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      This is a subpanel then? It is possible that the users who can't see it are in a role (directly or through their security groups) that have this panel's List/View rights set to None. You will need to look at a user who is having problems and check their Access tab to see what the rights are set to.

      Can you export the module and panel that is related to Meetings and send that over at least? No data is needed.

  7. crmadmin member avatar

    crmadmin

    3 years ago

    They each have the same role, only one, that is set to list/view/edit ALL
    I would be happy to export, but I don't know how to do that. Can you send me a link that explains?
    Thanks

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      The easiest way to do this is to zip the whole Sugar directory and put it somewhere that I can download it from such as Dropbox. No data will be included in that. Remove the config.php and config_override.php from the zip so that all passwords are not included. I'll be able to figure it out from there.

  8. crmadmin member avatar

    crmadmin

    3 years ago

    It is a massive file (702MB), If I exclude the upload directory, it gets significantly smaller. Does that work?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Yes, the /upload directory is not needed. Thanks!

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      Thank you! I have the zip now. Please give me a few days to a week to look through this.

  9. eggsurplus member avatar

    eggsurplus Provider Affiliate

    3 years ago

    Thanks! I'm removing the link here as thus is public. I will let you know when I have downloaded it. Likely later this evening.

    • crmadmin member avatar

      crmadmin

      3 years ago

      sounds good, it is 23 MB now, so much more manageable

  10. crmadmin member avatar

    crmadmin

    3 years ago

    Any more information on this?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      There are too many issues with the current state of the application to do a from scratch install so I'll try my best to help without being able to spin that up. There are a number of customizations around security groups in the code base that may be causing what you are seeing. Which module are you having layout issues in? Can you take screenshots and/or do a recording to demonstrate the issue and send it to solutions@eggsurplus.com?

  11. crmadmin member avatar

    crmadmin

    3 years ago

    The problem is all related to the Student module, which is a custom module but based on User. I have since deleted and re-created the layout for the security group and now the layout that is displaying has the correct title but the wrong fields. I will get a couple screen shots to send you.
    thanks

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      The layouts for each group are saved in /custom/modules/[MODULE]/metadata/[SECURITYGROUP_ID]. See if the fields are wrong for the group there. They should be correct and if so then it's a conflict for a specific user who may be in multiple groups. This would cause another group's layout to display instead of the main one. You can mark a specific group as the "Primary" group for a user in order to display the desired layout by going to the user and in the Security Groups subpanel click on edit. Then check the Primary box and save.

      Otherwise, I wonder if there is a conflict with some other add-on/customization that is causing the TemplateHandler to not load the correct group layout.

  12. crmadmin member avatar

    crmadmin

    3 years ago

    I checked the layouts and they are correct for the groups. I have just set a primary group for all the users having this issue but it doesn't seem to have fixed it. I will keep digging

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      I just got back from SugarCon and found someone else with a similar issue. Between the two cases I should have enough info to nail down how this is happening. Thank you for your patience!

  13. crmadmin member avatar

    crmadmin

    3 years ago

    Thanks for all your help! Glad that it wasn't just us

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      I still can't replicate this. Would you have time to hop on a call next week to walk through what you are seeing and perhaps do some debugging?

  14. crmadmin member avatar

    crmadmin

    3 years ago

    Sure, when works best for you?

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      3 years ago

      How does 3pm central today work (~2 hours from now)?

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
Rating
Rating
  • "No brainer. I have purchased it for two production installations and not regretted it."

    Read More Reviews

Keep up to date on the latest additions

We'll send you an email every month with handpicked add-ons, reviews, tricks and tips. Don't worry, we hate spam as much as you do.