v5- Role based Security Mgt. Test Cases..

Comments

• 15 Comments sorted by Votes Date Added
• Balduin

  July 2006 Vote Up0Vote Down

  the test cases described here and at the wiki are not entirely valid anymore with beta 2. i have been testing these cases and compared it with the special rules as they are defined by don at vtiger crm 5 - security implementation (<!-- m --><a class="postlink" href="http://blogs.vtiger.com/download.php?id=1294">http://blogs.vtiger.com/download.php?id=1294</a><!-- m -->).
  
  that is a very seriouse issue. without valid and documented rules nobody can configure the security settings.
  
  how should i report my findings? posting a ticket is not an option since the issue is too complex for puttting it into a simple ticket description.
• Sai

  July 2006 Vote Up0Vote Down

  dear balduin,
  
  thank you for reviewing security model after beta 2. could you please send all your findings to my personal email id gopals at vtiger dot com?
  
  in the meantime, i will also review the user interface and update the test cases asap.
  
  regards,
  gopal
• Safepack

  August 2006 Vote Up0Vote Down

  hello,
  
  i am facing problems in sharing access module. the version i am using is v4.2.4 & also v5.0.
  
  my organisation structure is as follows ;
  
  (a) ceo (chief executive officer)
  (b) cmo (chief marketing officer) - reports to ceo
  
  we have 2 groups/departments ;
  1) international marketing &
  2) domestic marketing
  
  (c) international marketing department has a
  a) intl. business manager (ibm) - 1 no. & b) intl. business executive (ibe) - 2 nos.
  
  likewise,
  (d) domestic marketing department has a
  a) domestic business manager (dbm) - 1 no. & b) domestic business executive (dbe) - 2 nos.
  
  dbe reports to dbm ; dbm reports to cmo.
  
  likewise,
  
  ibe reports to ibm ; ibm reports to cmo.
  
  cmo reports to ceo.
  
  my requirement is ;
  i) dbe should be able to access only his record. dbe should not access any record of dbm, ibm, ibe, cmo & ceo.
  ii) ibe should be able to access only his record. ibe should not access any record of ibm, dbm, dbe, cmo & ceo.
  iii) dbm should be able to access his record & record of his dbe. dbm should not access any record of ibm, ibe, cmo & ceo.
  iv) ibm should be able to access his record & record of his ibe. ibm should not access any record of dbm, dbe, cmo & ceo.
  v) cmo should be able to access his record, record of ibm, ibe, dbm & dbe. cmo should not be able to access any record of ceo.
  vi) ceo should be able to access all records.
  
  i have tried all possible settings but haven't succceeded....all records are being accessed by everyone & there's no limitation...
  
  please help with a solution.
  
  thanks,
  
  deepak
  mob: +91-98220-67467
• Balduin

  August 2006 Vote Up0Vote Down

  i have been playing with the security settings a lot and collected my findings in a paper. attached is a copy of a draft that explains the security settings options you have based on one simple example. (example ii is not finished).
  unzip and open the html file with your browser.
  you may find this helpful to figure out your configuration.
  
  please keep in mind that this is based on the rc release. if something changes at the ga release we will update the examples and provide a description at the new manual.
• Safepack

  August 2006 Vote Up0Vote Down

  thanks balduin for your inputs...
  
  i tried the way you've explained but it hasn't helped..
  
  kindly advice.
  
  deepak
• crouchingtiger

  August 2006 Vote Up0Vote Down

  hello deepak,
  
  thanks for your interest in vtigercrm.
  

  i have tried all possible settings but haven't succceeded....all records are being accessed by everyone & there's no limitation...

  
  the problems experienced by you might occur due to the following reasons:
  
  1. if the default organisation sharing access is not set as private
  2. if in the profile the glo\bal permissions for view all and edit all is not disabled.
  3. if after specifying the default organisation sharing access, recalculation of the sharing rules is not done. to do this just click on the recalculate button in the sharing privileges page.
  4. if the is admin option is enabled for the user.
  
  kindly cross check this. hope this helps you.
  
  thanks & regards,
  don
  vtiger-team
• Safepack

  August 2006 Vote Up0Vote Down

  hello don,
  
  thanks very much for your inputs.
  
  applying point 2 suggested (2. if in the profile the glo\bal permissions for view all and edit all is not disabled.) served my requirement partially...
  
  now, group international marketing is not able to access group domestic marketing's data & vice-versa....
  
  but, within the group, all users are able to access each other's data...how do i prevent this ?
  
  kindly advice.
  
  deepak
• Safepack

  August 2006 Vote Up0Vote Down

  dear gopal, balduin & don,
  
  i am awaiting your inputs to resolve my difficulty. do you have any solution to offer ?
  
  thanks,
  
  deepak
• Balduin

  August 2006 Vote Up0Vote Down

  it should work the way as don has described. all members of a group can see all data assigned to this group. but they can not see the data owned by individual users if they are at the same hierarchical level. supervisors can see all data of the users below in the hierarchical order.
  you should check your settings again.
  
  after you pushed the recalculate button wait a couple of minutes before loging in again.
• Safepack

  August 2006 Vote Up0Vote Down

  dear balduin,
  
  i rechecked with the settings & found that it worked...
  
  don's solution suggested worked for me..
  
  thanks to you all.
  
  regards,
  
  deepak <!-- s:) --><img src="{smilies_path}/icon_smile.gif" alt=":)" title="smile" /><!-- s:) -->