View Summary and Security of Notes

[datatoo]

History can indeed limit exposure of notes using roles and teams. How do I do the same thing for the View Summary which pops up and shows everything?

The activities/popup_picker.php and html I can see can be adjusted to eliminate notes, but I only want to limit them to people who SHOULD be viewing them.

How is the query generated for these notes, I am puzzled. The Workroom module does the same thing and exposes all notes, even when if they should be limited to a group.

This is my first week of looking at sugar code and so I am feeling a little lost.

We have fieldreps and managers as a groups and don't want the reps to always see every note related to an account or contact.
Thanks

[jmertic]

Please add a bug for this at http://bugs.sugarcrm.com, as it sounds to me like a possible product issue. In the meantime, change this section of code in modules/Activities/Popup_picker.php from:

 foreach ($focus_notes_list as $note) {
            $history_list[] = array('name' => $note->name, 
  

to:

 foreach ($focus_notes_list as $note) {
            if(!$note->ACLAccess('view')){
                continue;
            }
            $history_list[] = array('name' => $note->name, 
  

[datatoo]

Thanks that did the trick.
I will submit the bug report as well.
You saved me lots of time on this.

never submitted a bug before so i attached your change which works