[1.6.2 - 1.7beta] An user can't create a new contact (but can edit one)

[yagraph]

Hi, feng office team !

Now (1.6.2), Contacts permissions are managed through system wide permissions (as explained here : http://www.fengoffice.com/web/wiki/doku.php/user_rights), but that do not allow fine-grained permission control on contacts.
In a large installation (30 + users), there are personal contacts and common contacts, and some contacts should not be seen by everyone.
If we remove contact management rights to some user, he can no more create his own contact list, which isn't ideal to use in conjunction with mail module.

Is it possible, in a future version, to use workspace permissions in contacts, as already suggested here : http://forums.fengoffice.com/index.php?topic=3409.0 ? ?

Thanks a lot,
yagraph

[ignacio]

It is already working like that. The "Can manage all contacts" permission gives you access to all contacts, but without that permission you can only see contacts that are on workspaces where you have permission to "read" contacts.

[yagraph]

Hi Ignacio, and thanks for your answer.

So, I made a mistake with this bug and misunderstood what was happening :

Here is a new bug report :
In 1.6.2, an user without "can manage all contacts" rights can't create a new contact : an error message "you don't have permissions to do that" appear... despite he can create a new company.

Do you want me to create a new forum post about that , linking to this one?

[Henry]

Hi,

i think the permissions system is buggy.

I have post my problem with my permission problem but no comment. 
http://forums.fengoffice.com/index.php?topic=3676.0

I can not create a contact, if only the group have the permission to do that .

Henry

[ignacio]

Hi,

Can you try if it is working in version 1.7?

Thanks.

[yagraph]

Hi,

I'm sorry Ignacio, but I have no access to a 1.7 install at the moment, and cannot create a new database with my host provider... So I can't try it now.

If you have an 1.7 demo somewhere, I'll gladly test that for you.

Thanks

yagraph

[virtualweb]

there's a dirty workaround out for this.
turn "can manage contacts" off for the users and edit those 2 files, then the users see only their own contacts (from the same company they reside in) and still can add new contacts

application/controllers/ContactController.class.php
in function add() comment out:
#                       flash_error(lang('no access permissions'));
#                       ajx_current("empty");
#                       return;


application/controllers/ObjectController.class.php
comment out:
#                       flash_error(lang("user cannot link objects"));
#                       return;

[yagraph]

Thanks virtualweb for the workaround.

Thanks to Ignacio, I've just tested it in a 1.7 beta install, and I'm sorry to say it's still present, only with "simple" contacts (not with contacts groups or companies). An user trying to create a new contact will see : "Error: You don't have permissions to access requested page".

I modify the post title to reflect this new info.