Menu

#922 User capable of seeing menu item not capable of exporting CSV

Core
closed
nobody
None
5
2016-06-29
2013-06-18
No

On the Companies tab admin menu, the "Export Companies CSV" link is viewable if the user has 'read' rights to the menu as set in the "Menus" section of the "Admin" tab. In the proc that creates the csv for export, the operation will only complete if the user is an administrator. It seems odd that the permissions that control if a menu item is visible differ from the permissions that allow the item to execute... effectively providing users with links that will return errors if they try to use them.

Discussion

  • Jason Schindler

    Jason Schindler - 2013-06-18

    I've modified our PO to allow both admins and users with read access to the link the ability to export the CSV. This makes sense to us, but there may be a reason you chose to keep the two separate.

    I've attached a patch for your review.

    -Jason

     

    Last edit: Jason Schindler 2013-06-18
  • Frank Bergmann

    Frank Bergmann - 2016-06-29
    • status: open --> closed
     
  • Frank Bergmann

    Frank Bergmann - 2016-06-29

    Hi Jason,

    Absolutely correct, there are "transaction" permissions and "view" permissions. Just set the permissions on the tab to "admin". Nobody else should have to export CSVs...

     

Anonymous
Anonymous

Add attachments
Cancel