# Data security

**URL:** https://forum.manager.io/t/data-security/9893
**Category:** Uncategorized
**Created:** [June 5, 2017, 2:16pm UTC](https://forum.manager.io/t/data-security/9893 "2017-06-05T14:16:56Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![ismail](https://avatars.discourse-cdn.com/v4/letter/i/779978/32.png) [@ismail](https://forum.manager.io/u/ismail)
#### Post date: [June 5, 2017, 2:16pm UTC](https://forum.manager.io/t/data-security/9893/1 "2017-06-05T14:16:56Z")

</div>

i see there is no security of data in desktop, you can create a transaction then update it or delete it.  
so how to restrict this in desktop version. / And is this problem in Server edition also?

---

<div class="post-metadata">

### Author: ![d3mad](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/d3mad/32/3963_2.png) [@d3mad](https://forum.manager.io/u/d3mad)
#### Post date: [June 5, 2017, 2:27pm UTC](https://forum.manager.io/t/data-security/9893/2 "2017-06-05T14:27:30Z")

</div>

it’s been discussed elsewhere (search “desktop security”), however in short:

The desktop version is as secure as your computer is. You don’t generally need passwords to use applications on your computer, you usually need a password to use it.

The server version is different and is operated as a service that someone actually logs in to via the browser. As such, there is a login area for that purpose.

---

<div class="post-metadata">

### Author: ![ismail](https://avatars.discourse-cdn.com/v4/letter/i/779978/32.png) [@ismail](https://forum.manager.io/u/ismail)
#### Post date: [June 5, 2017, 2:29pm UTC](https://forum.manager.io/t/data-security/9893/3 "2017-06-05T14:29:06Z")

</div>

The ideal operation is system should allow updating or canceling offer with revision reference, then after creating purchase invoice or sales order, any further updation or deletion should not be allowed. Can some one who using the server/cloud version confirm this please

---

<div class="post-metadata">

### Author: ![d3mad](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/d3mad/32/3963_2.png) [@d3mad](https://forum.manager.io/u/d3mad)
#### Post date: [June 5, 2017, 2:55pm UTC](https://forum.manager.io/t/data-security/9893/4 "2017-06-05T14:55:13Z")

</div>

Take a look at this guide:

[https://www.manager.io/guides/how-to/create-users](https://www.manager.io/guides/how-to/create-users)

From the server version you can define allowed actions as:

 ![](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/2X/1/183c0ba612b6be00cc5c73f29343f50ef0ac8361.png)

That dropdown has these options:

![](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/2X/0/0519bdc9e6997f3463255f7acf5bc309b0d88eb1.png)

I don’t use that functionality as I am the only user and have admin access. It would appear from the options it comes down to what the user is allowed to do. However before all delete actions there is a confirmation dialog, but not so with edit. If the user has the edit role and allowed access to the item being edited, then the edit is immediate.

---

<div class="post-metadata">

### Author: ![ismail](https://avatars.discourse-cdn.com/v4/letter/i/779978/32.png) [@ismail](https://forum.manager.io/u/ismail)
#### Post date: [June 6, 2017, 7:44am UTC](https://forum.manager.io/t/data-security/9893/5 "2017-06-06T07:44:27Z")

</div>

Hi Dave,

Thanks for this, i appreciate.

So, if edited, is there a log maintained?

Best Regards

ismail

---

<div class="post-metadata">

### Author: ![lubos](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/lubos/32/62798_2.png) [@lubos](https://forum.manager.io/u/lubos)
#### Post date: [June 6, 2017, 7:49am UTC](https://forum.manager.io/t/data-security/9893/6 "2017-06-06T07:49:24Z")

</div>

@ismail, there is audit trail but currently it doesn’t give full information. You can see something was edited (e.g. invoice), you can’t see what exactly was changed (e.g. amount on invoice).

---

<div class="post-metadata">

### Author: ![Ealfardan](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/ealfardan/32/63166_2.png) [@Ealfardan](https://forum.manager.io/u/Ealfardan)
#### Post date: [January 18, 2023, 3:26pm UTC](https://forum.manager.io/t/data-security/9893/7 "2023-01-18T15:26:32Z")

</div>


