Hello,

 

I have configured the security module add-on and made some tests with
multi-tenancy. I can see how flexible is the tenancy management allowing
tenancy hierarchies, quite nice!. I have a couple of questions.

 

I have the following:

A Business (domain object) assigned to a tenancy.

A BusinessLocation (domain object) assigned to a Business, with the same
tenancy as the Business it belongs to.

 

sven user has read and write access to Business "Mr Pizza" using "Mr Pizza
teancy" Tenancy.

bob user has access read and write access to Business "Mr Taco" using "Mr
Taco teancy" Tenancy.

 

Everything works fine restricting access to each tenancy, so when I list
Businesses and Tenancies from the menu actions, it only shows each user the
objects within its tenancy (Businesses and BusinessLocations). But when user
sven adds a Business Location to "Mr Pizza" Business using the
addBusinessLocation action, the autoComplete form to select the business
reference it shows both "Mr Pizza" and "Mr Taco" , when sven shouldn't be
able to see "Mr Taco" Business. Just for testing, I added the business
location to "Mr Taco" and it issues an error message, but it adds the
businessLocation anyway, even when sven cannot see it later. What do I need
to do to restrict the autoComplete to show only the Businesses within it's
tenancy?

 

I am using security-module version 1.9.0 .

 

Cesar.

 

 

 



---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Reply via email to