Salesforce

WorldServer - TransPort users can view and delete archive projects for Clients they don't belong to

« Go Back

Information

 
Article TypeSolution Article
Scope/EnvironmentWorldServer
Symptoms/Context
We are looking at the option to give our client the option to monitor their projects in WorldServer Transport. The problem here is that they can also see other clients projects in the archived folder. Is there a way to restrict their access to only see the archived projects for their accounts only?

User-added image
Resolution
Remove the Can view projects created by other client users permission for Transport User Type.

User-added image
Root Cause
The current behaviour is that for all the archived projects, the project is visible if any of the clients connected to the logged-in user has the project creator as its user.

The issue is reproducing if a Transport user shares a Client with a user that has projects created for multiple clients. In this case, the Transport user will be able to see all the archived projects from different clients, created by the other user. For instance:

Client A: Transportuser1, user2
Client B: user2, user3
Client C: user2. user4.

Transportuser1 will see the archived projects from Client B and Client C created by user2.
 
Reference
Attachment 1 
Attachment 2 
Attachment 3 
Attachment 4 
Attachment 5 

Powered by