[prev in list] [next in list] [prev in thread] [next in thread] 

List:       vtigercrm-developers
Subject:    Re: [Vtigercrm-developers] Lazy question on webservices.
From:       Adam Heinz <amh () metricwise ! net>
Date:       2012-09-25 13:34:30
Message-ID: CAKBdvM_p1v1hejDKLLteom3ZdH+W8TroB7vqZjmj9aB4x2K3vA () mail ! gmail ! com
[Download RAW message or body]

On Tue, Sep 25, 2012 at 2:03 AM, Vikas Jain <vikas@vtiger.com> wrote:
> Your point seems to be valid and these fields should be allowed to be
> updated from REST, I'm trying to think of
> use cases that might be affected by allowing this displaytype 2 fields to be
> updated and their consequences.

I think this just a specific case of the more general field access
problem.  If displaytype were on vtiger_profile2field instead of
vtiger_field, Alan could easily create a new user+role+profile with
the necessary permissions.
_______________________________________________
http://www.vtiger.com/
[prev in list] [next in list] [prev in thread] [next in thread]