ssossossosso

Forums

Covering OroCRM topics, including community updates and company announcements.  Subscribe

Forums OroPlatform OroPlatform – Security Field level access control

This topic contains 11 replies, has 5 voices, and was last updated by Stepan Yudin Stepan Yudin 1 year, 3 months ago.

  • Creator
    Topic
  • #61880
    Ahmad Golzar
    Ahmad Golzar
    Participant

    Hi,

    Firs I should say we like you ACL system very much. It has covered most of our requirements.

    Do you have a plan to implement field level access restriction? Sometimes we just need that users with a specific role can edit or view an entity but not being able to view or edit a specific field. What is your suggestion?

    Best,
    Ahmad

Viewing 11 replies - 1 through 11 (of 11 total)
  • Author
    Replies
  • #61881

    Yurii Muratov
    Participant

    Hi, @ahmad-golzar.

    Thanks for your feedback.

    Yes, we have a plans to implement access checks on field level, but unfortunately, I cannot say when it will be implemented.

    I think that @Soroka able to provide more information on this subject

    #61882
    Stepan Yudin
    Stepan Yudin
    Participant

    Hi, Yuri.
    Im interested in this functional too. Maybe you know now – how long to wait for ths feature?


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61883
    Artem Liubeznyi
    Artem Liubeznyi
    Keymaster

    Hi Stepan,

    This feature is in our backlog but unfortunately I cannot provide you the clear timeline just yet. I will post an update here as soon as we decide to put it into a release.

    Thanks for your interest in OroCRM!


    #61884
    Stepan Yudin
    Stepan Yudin
    Participant

    Thank you, Artem. It would be great!


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61885
    ishakuta
    ishakuta
    Participant

    Here’s some draft https://github.com/orocrm/platform/pull/337 for field level acl.

    #61887
    Stepan Yudin
    Stepan Yudin
    Participant

    Yep, i saw it. Now waiting for this pull request to be merged)


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61889
    Artem Liubeznyi
    Artem Liubeznyi
    Keymaster

    It (finally) should be available in the upcoming 1.10 release. Thanks for your patience!


    #61890
    Stepan Yudin
    Stepan Yudin
    Participant

    Hooray! Thank you!


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61891
    Stepan Yudin
    Stepan Yudin
    Participant

    Good day everyone!

    One more question: is there any possibility to force enable field level ACL for entity?

    I added "field_acl_supported"="true" to my entity config, but after this i have to go to entity management UI and turn it on. I want to do this with migrations or with any other way without UI interactions.


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61892
    Stepan Yudin
    Stepan Yudin
    Participant

    I’ve found the solution. Just needed to add one more property to security config.
    Take a look at lines 9-11

    Thank you anyway, great Field-level ACL implementation)


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

    #61894
    Stepan Yudin
    Stepan Yudin
    Participant

    One more question)

    How can i turn of all permissions for specified field?
    I tried this:

    It works, but error hapens when i try to change any permission and save role via the UI form.


    Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
    https://github.com/stepansib/sf-oro-docker

Viewing 11 replies - 1 through 11 (of 11 total)

You must be logged in to reply to this topic.

ssossossosso