We’ve set up user email syncing via Google which is working well. However, we’ve run into a problem with visibility.
If you view the page for a particular user, you can see emails that are associated with that user record. There doesn’t seem to be any consistent pattern for which emails show up and which ones don’t, which means that one user could view emails from another user that they should not be able to see.
Ideally, a user would only see their own emails and the emails from other users that are associated to shared contexts. This limit does not appear to be in place or at least is not working consistently.
We tried disabling access to the User list via permissions but this breaks the ability to filter grids by Owner. The Owner list becomes blank for the restricted user and they cannot filter anymore.
Any ideas on how we can limit the visibility to emails to only those which a user SHOULD be able to see?
You must be logged in to reply to this topic.