NEW Move right from advance to normal for thirdparty information payment page #33796
Conversation
eldy
added
the
Discussion
| $this->rights[$r][1] = 'Modify thirdparty information payment'; | ||
| $this->rights[$r][3] = 0; | ||
| $this->rights[$r][4] = 'thirdparty_paymentinformation_advance'; // Visible if option MAIN_USE_ADVANCED_PERMS is on | ||
| $this->rights[$r][4] = 'thirdparty_paymentinformation'; |
There was a problem hiding this comment.
The idea behind the permission is that we must have in the default mode only 3 permission
read, update/write and delete + some if it is really not possible to use the application without.
As soon as we want to have a more accurate permission level, it is advanced permissions.
Can you describe your use case and why it is absolutely necessary that all company need to manage this permission differently than modifying the thirdparty ?
There was a problem hiding this comment.
This permission should be available without enabling advanced permissions, because editing bank account data (like IBANs) involves a major fraud risk.
Many companies must limit access to bank details to a specific group (e.g., accounting or finance), while still allowing others to edit general thirdparty data. Without this separation, every user who can edit a thirdparty could potentially change critical bank info — which is a serious security concern.
There was a problem hiding this comment.
I can confirm that this is a recurrent request from customers who want this right so as not to leave the door open to any modification and without activating the advanced rights.
thomas-Ngr
force-pushed
the
develop_move_right_thirdparty_information
branch
from
8143ea8 to
bc8985e
Compare
|
I still not have permission to merge the PR. Can you push it from a non locked repository ? |
4 participants
NEW Move right "Modify thirdparty information payment" out of advanced rights