Jump to content

Question

Posted

Hi,

I want to create staff users for my Sales People, but I only want them to see the clients they have sold a product to, I do not want them to see accounts of clients that are not theirs. I thought I could achieve this by creating different "Client Groups" and assign in the staff area only the group they can see. How can I configure something like this? Is it possible?
Thanks, 
Gabriel

3 answers to this question

Recommended Posts

  • 0
Posted

To add to what Jono said, the permission system is generalized to entire resources (e.g. /clients/). If you give staff access to clients, they can see all clients. There is currently no mechanism to limit staff to access only certain clients based on some criteria. However, if you create a plugin, you can setup plugin events that listen for an event like the AppController.preAction event that is called when someone views a page, and your plugin can perform logic to determine whether this is a staff user and whether they are viewing an appropriate client they have access to or not, and redirect them elsewhere if necessary.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...