SecuritySuite Alpha available for Testing

[eggsurplus]

An alpha release for SecuritySuite is now available at http://www.sugarforge.org/projects/s...suite/download

It's a fully working test version of team security under the name of groups. You can configure how you want it to work by editing the Security Suite Settings under Admin.

This Alpha release supports the following features:

• Multiple Security Groups
  Ability to assign multiple Security Groups to a record
• Security Group Assignment
  Have two system settings for how to deal with security group assignements when a new record is created.
  Checkbox A) Assign the record creator groups automatically to the new record
  Checkbox B) Inherit groups from the record's creation source. (e.g. If a case is created for a contact the case would inherit the contact's security groups)
• Additive Security
  Option to make role security additive (to deal with individuals with multiple roles)
  Greatest of rights within all groups' roles and greatest of rights within all user's roles. See User Role Precedence
• User Role Precedence
  Configurable option to make user's role takes precedence over any groups' roles.
• Uninstallable
  The module should be fully uninstallable

The entire planned feature list can be found on the download page in the Guidelines and Feature List v1.txt doc.

This release is meant for testing only. Please be smart and don't install on your live site unless you have tested it and are fully confident in it.

Please let us know what you think and any issues that you run into.

Thanks!
Jason

[rustinp77]

A lot of people are going to be asking so, let's get this cleared right away... Does this package offer team support wheras assignment of modules and/or object records?

In other words, does this provide the functionality of Teams found in Sugar Professional/Enterprise and/or what impact would this have wtih an existing Teams module already installed and is this compatiable with Professional/Enterprise or only recommended with the Community edition of SugarCRM?

Thanks for the project, excellent start; Well done.

~ regards

[eggsurplus]

Good questions. This is meant to act similarly to the Pro/Ent version but instead of being able to assign only one team to a record in the Pro/Ent version this will allow you to assign multiple teams to a record. This is not meant to work with any other Team install. This is a replacement for that. This alpha version currently only supports the CE but given enough support I could put the time into making it available for the Pro/Ent version.

[SugarDev.net]

Some questions:
1. You write to config.php, why not config_override.php?
2. There are Subversion folders in the zipped archive, could you take them out in the next release?
3. I'm diving into the code now...perhaps I'm interested in development, if you are...

[PeteKilby]

Good questions. This is meant to act similarly to the Pro/Ent version but instead of being able to assign only one team to a record in the Pro/Ent version this will allow you to assign multiple teams to a record. This is not meant to work with any other Team install. This is a replacement for that. This alpha version currently only supports the CE but given enough support I could put the time into making it available for the Pro/Ent version.

We would be very interested in a version for 5.0 Pro if it was ready in the next few weeks, and I can kick in a bit of cash to help make it happen. Probably not enough to be compelling on its own, but perhaps a few other people would be willing to do likewise?

[KenWood]

We would be very interested in a version for 5.0 Pro if it was ready in the next few weeks, and I can kick in a bit of cash to help make it happen. Probably not enough to be compelling on its own, but perhaps a few other people would be willing to do likewise?

Oops, somehow that post ended up in Pete's name when it should have been mine. Please contact me, not him, for any followup.

Thanks,
Ken

[eggsurplus]

KenWood,

That would be great but it is still in alpha so having it fully tested and further developed out for such a complex piece in two weeks is probably not a good idea in the name of quality. I do want it to be done with shortly though. I'm targeting about a month to a month and a half out right now.

SugarDev,

1. There's no good reason except for leveraging code that already did that. I'll change it to use the override in the next release.
2. I swear I did but I'll double check to make sure next time.
3. I'll make sure to contact you first if we need another hand.

[pblag]

Hi Jason!

Really good idea!!

We will use your project in our new and existing projects.

Thank you very much,

[eric0127]

I encountered the MySQL error 1054 - Unknown column ... in 'on clause'. I had to change modules\SecurityGroups\SecurityGroup.php to get around it. My MySQL version is 5.0.22.

Original code (starting from line 25) :
return "exists(
select secg.id from securitygroups secg
inner join securitygroups_users secu on secg.id = secu.securitygroup_id and secu.deleted = 0
and secu.user_id = '$user_id'
inner join securitygroups_records secr on secg.id = secr.securitygroup_id and secr.deleted = 0
and secr.module = '$module'
and secr.record_id = $table_name.id
where secg.deleted = 0

New code:
return "$table_name.id in (
select secr.record_id from securitygroups secg
inner join securitygroups_users secu on secg.id = secu.securitygroup_id and secu.deleted = 0
and secu.user_id = '$user_id'
inner join securitygroups_records secr on secg.id = secr.securitygroup_id and secr.deleted = 0
and secr.module = '$module'
where secg.deleted = 0

[eggsurplus]

Thanks Eric! I obviously didn't set up a MySQL test environment yet. Should have caught that. Thanks for the fix!