Hi, I’m not the most versed with the Project module, but I have a customer who uses projects and has some restriction groups configured to limit access to projects, mostly along branch lines, they have several branches. That part seems to be working, users are only seeing projects that they are assigned to in the restriction group (via project groups). What he is reporting however is that on the Project Transaction screen, users can see and call up transactions tied to projects that they don’t have access to otherwise. And his biggest issue is that they can actually Release these transactions as well.
It also looks like they are using that Project Transaction Visibility by Account group and again, that part is working in that it is blocking access to some transaction lines, but he’s saying even with that, it still allows the user to call up the transaction and release it. I haven’t gone through a full test on this, although I did confirm that I can see the transactions tied to projects that my user can’t see on the Projects screen. Has anyone seen or encountered this and if so, is there anything that can be done to prevent either seeing these transactions all together or being able to release them? He does want the user to be able to release those transactions for projects he does have access to, so it doesn’t seem I can simply do something user role access wise to block the release function. It sounds like something customization wise might have to be done. Thanks!
