Users (Manager server) with View can Batch Create and Update

1

Hello,

I searched the forum, but I couldn’t find anything. Please do correct me if there’s already a bug report about this.

I tried out the ManagerServer.exe included in the Windows install, and I ran into the issue mentioned above (users on Manager server with View permissions can Batch Create and Update).

Steps for recreation:

  1. Create new limited user account, with only view permissions for a business, for tabs like Bank Accounts (where batch create and update are options).
  2. Impersonate that user, go to Bank Accounts, and use Batch Update and Create as you would with a full access account.

I was looking into the possibility of using Manager Server for more granular access, but for this I feel if a view option is present, it should not allow for Batch Create and Update, if it doesn’t allow for manual updates and deletions.

Please correct me if I’m wrong and this is intended behaviour, but if it is a bug, I would love to see it corrected and for Manager to improve.

2

You are correct. This is now fixed in the latest version (20.5.48)

3

Thank you! Really appreciate the prompt response and support.