In version 25.3.12.2185 Manager, controls over access to master files appear broken. Even when a user is not granted access to the Suppliers tab, they can still access supplier records when generating documents such as payments, receipts and invoice Similarly, users can access all bank accounts in…

That’s not a bug in this version, that’s how it has always been. In fact, that’s basically how every database works and trying to reinvent the wheel would make Manager unusable to 99% of its users. [image] Abeiku: Even when a user is not granted access to the Suppliers tab, they can still acce…

[image] Ealfardan: I don’t see the problem here If all the bank accounts granted to a user are deleted, the user will automatically gain access to all accounts because, by default, when no specific accounts are assigned, all accounts become visible. This is a loophole. The correct behavior sh…

@Abeiku , you are asking for a bug to be intentionally introduced. The system will be unusable. Restricted users MUST be able to reference master records even if they don’t have access to the master tables. Otherwise, only administrators will be able to do any work. This nullifies all benefits from…

I believe that if you want to give a user access to master records, give them “View” access.

My issue is this: suppose in the setup you suggested that I’ve given a user full access to Sales Invoices but no access to Customers, what exactly does that achieve?

If a user has full access to invoices, they also need at least view access to the Customer tab to work effectively. Their role typically goes beyond creating invoices as they may need to reconcile accounts, follow up on outstanding balances, or verify deliveries, all of which require access to custo…

I dont think permissions settings are broken but what you want is another layer of restriction which should apply to lines and individual fields of transaction forms. You want a user to interact with certain accounts/items only. Thats upto developer if he wants to implement something like this or no…

[IMG_1965] I’ve known it to work this way in the past, and I’m currently trying to find a post where @lubos may have announced any changes — if such changes were made intentionally. I strongly believe that users should be able to see only the bank or cash accounts they are permitted to work with.…

Here is another comment by the programmer. I’m still trying to find at what point those rules were relaxed. [IMG_1966] [image] User permissions and cash accounts I’m going to take your word that it was possible but it might have been a bug. It wasn’t intent…

[image] Abeiku: If all the bank accounts granted to a user are deleted, the user will automatically gain access to all accounts because, by default, when no specific accounts are assigned, all accounts become visible. This is a loophole. This doesnt not happen. If you delete an account the Re…

User permissions should allow to filter data

ideas

Abeiku March 13, 2025, 6:44am 10

Here is another comment by the programmer. I’m still trying to find at what point those rules were relaxed.

Topic		Replies	Views
Suggestion for improving user permissions Uncategorized	72	5368	November 12, 2022
User restrictions - not consistant across selections Uncategorized	48	2330	January 12, 2020
All bank accounts can be seen by restricted users Uncategorized	11	569	May 2, 2021
User permissions and cash accounts Uncategorized	20	2651	November 17, 2017
Users Right restriction for AR and AP Uncategorized	15	944	November 18, 2020

User permissions should allow to filter data

Related topics