Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.
#3523 - Support needed to set up some groups
Hello,
We're struggling with setting up our permissions in SecuritySuite. Would it be possible to get some assistance?
Thanks, Andrew
-
"Incredibly useful. It's one of the first features you need. This needs to be part of the core product." - MTP
Read More Reviews
- Most Recent Love from Users
kacsoristvan- damien8105
- anri
- Administrador
- Stefano1
- einkauf2
6 years ago
Hi Andrew,
There is definitely a learning curve to it. I'm happy to help. What are you trying to accomplish, how have you tried to set it up so far, and what are you running into right now?
6 years ago
Hello, thanks for getting back to me. I've attached a diagram to explain our scenario..
So, starting at the top, our set up should look like this..
What I have tried so far:
This was the closest I got. Brokers couldn't view other users and specific brokers could only see their contacts BUT, they couldn't assign validators to tasks (because they couldn't see them), and when adding users to each specific broker group, they could only see contacts which had been assigned to them.
Any help / direction much appreciated!
Thanks
Andrew
6 years ago
Thanks Andrew.
From what you describe I don't see any mention of one group not being able to see another group (leaving aside the user assignment requirement you have). If that is the case then SecuritySuite may not be the answer here for you. SecuritySuite is meant for having multiple groups at the same level, for example Broker Group A and Broker Group B, where both groups cannot see the records from the other.
For the requirement of brokers not being able to assign to other brokers, that is a pretty specific requirement that will require customizing what Sugar returns for that user list. You could even do this without groups by having a field on the User record such as "Type" with values of Validator or Broker. Then if the current user is a Broker filter out all Brokers.
There are three spots in include/utils.php where you would need to add your custom logic. In the get_user_array, getUserArrayFromFullName, and get_bean_select_array functions. This would require someone with development experience to alter correctly. Unfortunately it isn't something that I would be able to do with you, but hopefully this gives you a good head start.