Field Level Access Control - BETA module

[mvngti]

Hi,

I am uploading a BETA version of a field level access control module I built for SugarCE here.
Please try it out and give me some feedback for a final version.

The license on this BETA is that you can use it for evaluation and if you give feedback you can keep using the final version when released.

Tx

[SugarDev.net]

If this works I would be very pleased

A few things I noticed:

- you still use the old way of adding logic hooks, this can be done in manifest.php now (since 5.2, so you'll probably need to keep both). There is no uninstalling your logic hook right now

- your module has a lowercase name and underscores. No biggie, but I would prefer it if module names were consistent

I'm very excited and I hope this gets production-ready someday . Will try to install and play with it tomorrow.

[mvngti]

I'm posting a slight improvement. Previous one did not display access dropdown correctly.

M

[anvaruz]

This is unbelievable! I’ve been waiting for this for more than a year.
Not sleeping tonight - testing)
cannot find any problems yet

Field level access is the only issue which was holding me in implementing SugarCRM in our organisation; we are a charity and unfortunately cannot afford to get Professional or Enterprise edition.
Looking forward for final release.
Thank you for your work!

[mvngti]

- you still use the old way of adding logic hooks, this can be done in manifest.php now (since 5.2, so you'll probably need to keep both).

I'm very excited and I hope this gets production-ready someday . Will try to install and play with it tomorrow.

Tx, I want it production ready ASAP. Could you post references to the "new" way of adding logic hooks?

[SugarDev.net]

Yes sir - wrote it myself - http://www.sugarcrm.com/wiki/index.p...hp#logic_hooks

[SugarDev.net]

Okay I'm just throwing some stuff I see here, it's up to you to prioritze them .

- on a clean install there are no roles and your module says "list_fields" in the dropdown.
- When viewing a field in detailview, the fields_access_list doesn't work. I think it's best if you move the fields_access_list from your bean to the application language, that's where it belongs
- I hope you don't mind I capslocked a few words on your query to make it more readable and safer:
$query = "SELECT * from acl_roles_users LEFT JOIN acl_fields USING (role_id) WHERE acl_roles_users.deleted=0 AND acl_fields.deleted=0 AND user_id='".$current_user->id."' ORDER by category, name";
- It may be a good time to start making a roadmap for this project. I see that you want to make a list of fields in the future? ("Currently you have to type in the field name (precisely as it is in the selected module"). That sounds like a plan? .
- The module is accessible by non-admins at the moment
- Internally your module speaks of "category". It may be best if this is called "module"
- Listview is not supported, I got it working with:

 $hook_array['process_record'] = Array();
$hook_array['process_record'][] = Array(1, 'acl_fields', 'modules/acl_fields/fields_logic.php','acl_fields_logic', 'limit_views'); 
  

You will need this logic hook for listviews.
and

                 if (  (eregi('detail',$view) && $limit > 1) ||
                      (eregi('list',$view)   && $limit > 0) ||
                      (eregi('index',$view)  && $limit > 0) ||
                      (eregi('edit',$view) && $limit > 0)   )
                {
          //print_r($bean);exit;
                    //unset($bean->field_name_map[$fieldname]);
                    unset($bean->field_defs[$fieldname]);
          unset($bean->$fieldname);
                    $bean->field_defs[$fieldname][acl] = $limit;
                    //$mod_strings[$vname] = '';
                } 
  

This is not perfect, since the table header is still there, only the value is empty in ListView. I'm sure you're working on this, since the commented lines...

[mvngti]

Great feedback tx.
I will put up a roadmap sometime next week some time.
I want to get this up an running within a couple of weeks.

[SugarDev.net]

Great to hear. I also noticed that the module still has a Dashlet. Seems unneeded.

[mvngti]

I am moving this module to a sugarforge project here http://www.sugarforge.org/projects/fieldacl

I will upload a readme and a roadmap there in the next day or two.