Suitecrm: Security Groups - any fields for edit, detail or listview ?

[Mausino]

Suggestion

I am wondering that you can in listview assign to Security Groups but you're not able work with information in edit, detail or list view again.

When i will assign the records to one Security Group, where i will see to which group are assigned the records ?? if isn't able to add those field into edit, detail or list view??

The security fields must be added to edit, detail and listview.. also must be possible to filter or add to dashlet it. If you're able by listview assign the record to Security group.. it should exist in database those fields.

Now you are able only see it in subpanel of record to which Security Group is assigned. And this make this situation very unconfortable, Because you can't almost nothing with records.. You're not able to filter the record by groups or add the column security group to listview.

Context

When you're bigger and you're growing you need select what data can see your users (employees).

Your Environment

• SuiteCRM Version used: 7.10.11 (official demo)

[pgorod]

There is a Security Groups subpanel in each record's Detail view. I thought it was visible by default, isn't it?

[Mausino]

@pgorod, yes i wrote it that's only what you we have now

Now you are able only see it in subpanel of record to which Security Group is assigned. And this make this situation very unconfortable, Because you can't almost nothing with records.. You're not able to filter the record by groups or add the column security group to listview.

I wrote it... but problem is you can't work with bunch of data... YOU

• can't check more records to which security groups belong
• can't unassign more record from security groups
• can't asign/unasign the securtiy groups to field/dropdown values [Suggestion to Enhacemnet]
• can't test if user will availabe see the records (problem if you have many groups) [Suggestion to Enhacement]

I know that Security Groups are big bussiness for third party (will not mention which) but without adding the Security groups minimal to listview we don't move nowhere and middle + larger companies will stuck on software of 3rd propiertaly which only by their module extension give the power of access to company data of more users with different level of hierarchy/multi stores(merchants in many places) in their organisation. Sorry for English

@horus68 @Abuelodelanada @gunnicom @salesagility @samus-aran @Dillon-Brown @PedroErnst please what's your opinion ?

[pgorod]

I see what you mean now. I agree there is a valid use-case for adding more visibility and functionality to the current state of Security Groups.

Most of this isn't too difficult to add from layout files, since these are simply relationships in the database. But ok, your suggestion is that this should come out-of-the-box, I see your point.

[gunnicom]

I did not deal muxh with security groups yet, so i do not have a strong opinion on that one for now. I will do my concept for using security groups here definitly in 2019, so maybe then i can tell you something about it.

[Abuelodelanada]

Hello @Mausino !

I get your point, and agree with you. As @pgorod said, many of this should come out-of-the-box.

But I think we have to be very careful with SG. We are using it since 2010, now in a SugarCRM CE 6.5.25 instance (In February, if everything goes well, we'll start the migration to SuiteCRM 7.10.x )... In performance terms, SG is not so good.
We have more than 24.000.000 records in securitygroups_records table and an INNER JOIN is sometimes very painful.

Having JSON fields since MySQL 5.7 I do not think that is a good idea (in performance terms) to store relationships between groups and records in a huge table like securitygroups_records.

[Mausino]

5850 [Can't assign Role or Group for Inbound Group Email Account ]

[Mausino]

@Dillon-Brown is some plan to add SG minimal to listview ??? that we can we can minimal
as @pgorod wrote, it wont be hard implement this two points

I see what you mean now. I agree there is a valid use-case for adding more visibility and functionality to the current state of Security Groups.
Most of this isn't too difficult to add from layout files, since these are simply relationships in the database.

• see to which SG is records assigned in listview
• can unassign from SG more records in listview

i saw that you/or somebody develop some other enhacement #6143 [Shared Security Groups]
Do you have some date where should it be available ?

as you wrote there and it will help us with restrictions to records

• add shared security groups to users with Shared Security Groups module, use Administrator/Shared Groups Settings menu.
  an example in details:
  
  
  
  • add some test account with name contains a specified string (for e.g "foo")
  
  
  • add a test user if you don't have.
  
  
• navigate to the admin/shared security groups page
• create a record, related to account module
• add a condition: name contains "foo"
• login with your tester user account
• navigate to account module page
• now you are not able to change each accounts where name contains "foo"

[eggsurplus]

I just want to point out that you can do this in the full, enhanced edition of Security Suite available on the SuiteCRM Store. This doesn't make the Github issue invalid, but wanted to point out there is a solution for this:

https://store.suitecrm.com/addons/securitysuite/

Feel free to contact me with any questions.