FrontAccounting forum — Prevent access to other users information/entry

Re: Prevent access to other users information/entry

null@example.com (apmuthu) — Sun, 09 Nov 2014 10:27:48 +0000

Unless you are logged in even if you guess the url how can you see it?

Re: Prevent access to other users information/entry

null@example.com (dumb4ever) — Thu, 06 Nov 2014 10:22:18 +0000

apmuthu wrote:

Each URL has some sort of ID you may want to use...

Yes but the ID is sequential, i.e ../sales/view/view_sales_order.php?trans_no=3&trans_type=30

the trans_no can be guessed by just about anyone, if its random, it will be harder for ppl to guess and do "manual" lookup.

Any ideas ? Thanks

Re: Prevent access to other users information/entry

null@example.com (apmuthu) — Thu, 06 Nov 2014 07:09:49 +0000

Each URL has some sort of ID you may want to use...

Re: Prevent access to other users information/entry

null@example.com (dumb4ever) — Thu, 06 Nov 2014 01:22:43 +0000

Janusz,

Is there a way to limit the finding for inquiry ? maybe by putting some "code" so instead of searching through range of dates, or quotation no., user can just enter that "code" to lookup and edit previously entered information.

Thanks

Re: Prevent access to other users information/entry

null@example.com (dumb4ever) — Wed, 05 Nov 2014 18:01:56 +0000

Thank you for the reply Janusz, I asked because for me, it's a crucial thing to have to prevent salesman from taking customer information and opportunity.

Thank You again.

Re: Prevent access to other users information/entry

null@example.com (itronics) — Wed, 05 Nov 2014 17:39:52 +0000

No, such setup is not available in FA, and would be hart to implement as module. You will need customize core source code.
Janusz

Prevent access to other users information/entry

null@example.com (dumb4ever) — Wed, 05 Nov 2014 11:33:42 +0000

I'm sorry if this is the wrong place to post this topic,

But I'm new to FA and need to limit access to information for each users, so for example if:
- user A create sales quotation/order #1, User B create #2, #3
- user B won't be able to do Sales Quotation/Order Inquiry and see entry from user A (User B only see #2 and #3)

Is there a way to do this or would this require a module/customization ?

Thank You