Team management, security and WS-Security

[JavaCK]

Hi,

I'm a new user to SugarCRM which Community Edition looks great (congratulations to the team by the way !), and I have a couple of questions :
Having seen this "how users share data with colleagues?" threadhttp://www.sugarcrm.com/forums/showt...ighlight=teams

"I'll have several companies using the system. I want the user of the same organization to share data and leads,... but NOT with other companies on the system. How do you set that up?"

I understood that you can create some Teams as followed (only in the pro Edition to get the Teams Module, isn't it ?) :

Team A, Team B, Team C

You have 9 uses in your system: User1, User2, User3, User4, User5, User6, User7, User8, User9

You relate the:
1. Users 1, 2 and 3 to the Team A
2. Users 4, 5 and 6 to the Team B
3. Users 7, 8 and 9 to the Team C

You create the Account 1 and assign this account to Team A
You create the Account 2 and assign this account to Team B
You create the Account 3 and assign this account to Team C

Only the users related to Team A will have access to Account 1 (Users 1, 2 and 3), and so one


Fine so far, but I would not like to need to assign accounts to a team, what I would like to have is this :

- if Users 1, 2 or 3 creates an accounts (Team A), that account will NOT be visible for Users 4, 5, 6 (team B), neither for user s 6, 7 & 8 (Team C) , would SugarCRM Pro Edition behave as such ?

- Is this security mecanism implemented for any "object" in sugar ? (contact, mail, account, campaign, document, case, bug, etc ...) ?

- Then does this Team security management behaves exactly in the same way with the SOAP API, available at http://localhost/sugar/soap.php?WSDL : Users 4, 5, 6 (team B) login and invoking any getXXX operation would not see the data created by Users 1, 2 or 3 (Team A) ?

- Does the SOAP API supports any WS-* standard, especially WS-Security ?


Thanks & regards,

Steve

[JavaCK]

Can someone from Sugar Team answer my last post about the Teams module ?

Is this security mecanism implemented for any "data" in sugar ? (activities, account, campaign, contact, document, case, bug, leads, opportunities, quotes, products, projects, forecasts, reports, mail etc ...) ?

- if Users 1, 2 or 3 creates an account (Team A), would that account be visible for Users 4, 5, 6 (team B), or for user s 6, 7 & 8 (Team C) ?

Thanks for your help,

Steve

[sugarcane]

Hi Steve,

the Team security works such that if Account 1 is assigned to Team A, then User 8 who is not part of Team A will not be able to view that record.

This is true even if User 8 creates or is assigned to Account 1.