The Forums on slxdeveloper.com are now retired. The forum archive will remain available for the time being. Thank you for your participation on slxdeveloper.com!
|
| |
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 11:39 AM
|
fiogf49gjkf0d Kirti,
I haven’t ever tried this, but it may be possible to assign the contacts and account’s ownership to a team and then have the opportunity owned by an individual. You won’t be able to accomplish this via the standard interfaces. You will have to code a solution to provide this functionality. Furthermore, I honestly don’t know if it would have any adverse affects on the system, so take caution with this suggestion, and make sure it’s thoroughly tested first if you try it.
Does anyone else have any experience with this? It’s an interesting question.
~JC |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 12:14 PM
|
fiogf49gjkf0d Hey Jeff!
Yes it is possible. As you stated you can not use the stock product features for setting ownership however as the UI is hardcoded to cascase account ownership to the contacts and opportunities.
Due to this behavior you can not use the stock product territory realignment tool either. Also note that there are tests within the Integrity Checker that will realign ownership to match the parent account record.
In one of our implementations the customer wanted account.seccodeid changes to cascade to the children if the original seccodeids were the same. If they were not the same the account changes should not cascade. We used SQL Triggers for this. The customer signed in blood that they would not ever use sync. 
Timmus |
|
|
| |
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 3:36 PM
|
fiogf49gjkf0d There is no hacking required: just dont use databinding for updating the seccodeid. Handle it with a non bound control and an update statement.
Also, hopefully RJ can elaborate but I do not agree with the statements:
"You cannot do it w/out a lot of customization in pre-Scorpion (v7.0). In fact, you cant's do it in a manner that will prevent access."
You can do it in a manner that will prevent access. We have done this in multiple implementations. It really isn't that complicated.
RJ?
Timmus |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 8:50 PM
|
fiogf49gjkf0d OK...
Timmus, what I was attempting to do in the "other forum" was to point out that prior to v7 and it's Provider plugins (extending security) that any attempt to "carve out" parts of security - like Opportunity ownership - really cannot plug all of the holes w/out a bit of work. Remember that simply running Integrity Checker (pre Scorpion) will re-do the SECCODEID values and then security goes out the window.
What is really a "simple" customization for our point of view is really an extensive customization for a lot of folks that frequent that "other forum".
OK?..
--
rjl |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 9:16 PM
|
fiogf49gjkf0d Yes, I mentioned that the integrity checker was a problem and that it can not be used for security realignment. This is more of a training issue than a technical issue, IMO. In fact, we tell our customers to NEVER use the integrity checker. It's just safer that way .
Timmus |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 06 Sep 06 9:48 PM
|
fiogf49gjkf0d Agree.. prior to v7.0 in all the situations where we so "admin" stuff for our clients we tell them that we'll run IC.
As of v7, we'll furnish a set of tests that they can safely use. I've also got something in the works that's light years ahead of the IC in v7. It will be a replacement app that's really going to be slick! 
--
rjl |
|
|
| |
| |
|
Re: How can we hide only opportunities from other users
Posted: 21 Nov 07 12:20 AM
|
| No - sorry I'll rephrase the question. When you hide opportunities from other users, how does that effect the opportunity security inside the sales dashboard and visual analyzer? In other words - does the sales dashboard and visual analyzer check the account owner or the "new" opportunity owner when filtering the data? |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 21 Nov 07 9:24 AM
|
OK.. "Provider 101":
ALL queries to the SalesLogix DB automatically have the "security" of the logged in user ADDED to the SQL on the fly by the "provider".. there's (almost) nothing you can do about this.. it just works that way.
The Dashboard is part of SalesLogix (not an external app like VA is) and respects this.
(Walter... please correct me if I make a mistake on this part)
Queries by VA are totally different and you have to "code" stuff to deal with security.
--
rjl |
|
|
| |
|
Re: How can we hide only opportunities from other users
Posted: 22 Nov 07 8:21 AM
|
It does NOT look at the Account owner (SECCODEID) when looking at opportunity records.. it looks at the Opportunity.SeccodeID
You can see all of this very easily by using the SlxProfiler. It located in EVERY SalesLogix install since v6.2.3 in PF SalesLogix. There's a help file too to explain how it works (No additional documentation is available).
--
rjl |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 22 Nov 07 6:24 PM
|
I disagree with this, or maybe I have misunderstood your post, but ...
We had a potential 'difficult' security requirement & my testing for that indicated that if a user has access to an opportunity.seccodeid but not to the opportunity's parent account.seccodeid, the user will not see that opportunity (tested in 7.0.1).
PP |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 23 Nov 07 8:32 AM
|
In the case you stated.. true..
Now if you want to totally re-vamp security.. you can do so by dis-abling (or over-riding) the OOTB security (v7.x and up) by writing a "plugin" for the provider....
Unfortunately, there's very little info available on how to do this... it's a VERY advanced Slx development activity.. and requires extensive knowledge of how security works. There are no "public" postings (AFAIK) on how you do this and the vast majority of Slx BP's either:
A - Don't know about it
B - Don't have the capability of doing it.
AFAIK there's no non-BP that's done it (no someone will probably post and contradict my posting...)
We have built some simple "mods" (ex: hiding opportunities from everyone but the Account manager of the opp, etc) but of course (like you) we charge to do it.
Since you are a BP (according to your profile) you can get some of this info from the "ftp" site. Also, if you can get a copy of the presentation on security extensions (from Insights 2006 i think) you would have a better idea on what may be possible.
--
rjl
|
|
|
| |
|
Re: How can we hide only opportunities from other users
Posted: 27 Nov 07 3:20 PM
|
Interesting. Out of curiosity, did you test the following scenario:
Account "Sage" is owned by Everybody
Opportunity A belongs to "Sage" and is owned by User 1
Opportunity B belongs to "Sage" and is owned by User 2
If User 1 creates an activity, or attachment for Opportunity A, will User 2 see those items at the Account Level, assuming he/she has no access to Opportunity A? |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 29 Nov 07 10:56 AM
|
| They will still see the attachments / activities on the Account Tab Forms as they have permissions to see them based on the Account Ownership of Everybody. Activity viewing in the list view (it's not a grid) may be limited by Calendar rights (se in the Administrator)....but you could still see which opportunity an Activity was pointing to (even if you couldn't get to the detail record). |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 29 Nov 07 11:00 AM
|
"We had a potential 'difficult' security requirement & my testing for that indicated that if a user has access to an opportunity.seccodeid but not to the opportunity's parent account.seccodeid, the user will not see that opportunity (tested in 7.0.1)."
Phil that's correct....Account Ownership trumps all......since 1997.
Remember that an Opportunity hangs off an Account.....if you are saying that the user can't see the account, you are saying they shouldn't see Tickets, Contacts, Opportunities, Activities, History, Address, etc......
Recall that the AccountSummary Table stores all Account's ownership/SECCODEID......that's the ticket, that's the way it is... |
|
|
|
Re: How can we hide only opportunities from other users
Posted: 03 Jan 08 12:07 AM
|
| Question for RJ or anybody else who has made this work - we added the SECCODEID field to the opportunity detail screen, but we're running into issues where if they choose a team or everyone, it is displaying "Unknown User". If we pick a single user, it displays the single user fine. Any idea why this happens? |
|
|
| |
| |
| |
| |
| |
|
Re: How can we hide only opportunities from other users
Posted: 05 Jan 08 12:30 AM
|
| I've changed it to ftOwner, but I'm still having a strange problem. When I select a team, it displays "unknown owner". If I save the oppo, leave the opportunity and come back to it, it displays the correct team. But if I select another team, it displays "unknown owner" again. Thanks for all of the help so far! |
|
|
|