CRM module: users see all Customers regarding of Mailbox permission
Closed this issue · 2 comments
dabesa commented
We have multiple mailboxes and the CRM module.
A non-admin user can see all customers at this page:
/search?mode=customers&xs_crm=1
Even customers from Mailboxes that has no access to.
The impact is that users can see customers details they are not supposed to get access to.
PHP version: 8.1.28
FreeScout version: 1.8.143
Database: MySQL
Are you using CloudFlare: No
Are you using non-official modules: No
freescout-help commented
pedroponte commented
+1 for this request