My colleague is able to see my companies in SuperOffice CRM. I have been told that this should be not possible with our system setup. Why does it happen and how do we fix it?
There are a couple of known situations when this can occur:
- When SuperOffice CRM user data rights permit access to these records
- When storing data to the database issue happens
When SuperOffice CRM user data rights permit access to these records
When in Settings and Maintenance User Role (1) that your colleague's SuperOffice user has is permitted to see records of other users - the situation might occur.
To clarify, please ask your SuperOffice administrator to navigate to Roles (1), select the role of your colleague's user (2), click on the Data rights (3) tab and confirm that in the data object type line (4) all except My own columns has None (5) option selected. That means that this user can see only his own records, but nobodies else.
Please check this FAQ if you want to learn more about access control in SuperOffice CRM.
When storing data to the database issue happens
The described situation can occur if you have created companies when your SuperOffice user had assigned another User group when you were creating a record. Most probably that your colleague could see records created by users in that user group. It is possible that the company record that you created still has the group_id field filled with your previous User group's ID. Most probably your user's Primary or Other groups (1) set up have been changed recently in your SuperOffice administrator.
In this case, you need to update the database that it would store the correct group_id in the company's record. To do it please follow the steps below:
- Open in the edit mode the card of the company that is visible, but should not be visible.
- Change the Our contact (1) field to some other user from the system and Save (2).
- Then open the same company record in edit mode again and change Our contact back to your user an click Save again.
This action will correct the group_id value in the database and the company will not be visible for users that do not belong to your group.