Adding New Actions to Roles (How I did it)

[mrbarletta]

Hi there,

I needed to manage a new kind of Permission to Sugarcrm CE 6.2.X . Out of the box you have, VIEW/LIST/ACCESS/IMPORT/EXPORT/DELETE and I wanted to manage a new Optionn called "Massupdate" and other stuff, so I added a new Action called massupdate and now I can manage it from the "Roles" section.

This is how I did it:

1. Define de new action in modules/ACLActions/actiondefs.php
2. Repair Roles
3. Use it in your code
4. set language

1) modules/ACLActions/actiondefs.php

'massupdate'=>
	array(
	'aclaccess'=>array(ACL_ALLOW_ALL,ACL_ALLOW_OWNER,ACL_ALLOW_DEFAULT, ACL_ALLOW_NONE),
	'label'=>'LBL_ACTION_MASSUPDATE',
	'default'=>ACL_ALLOW_ALL,
	),

2) Repair Roles

3) Use in the code

if (ACLController::checkAccess('Opportunities', 'massupdate')) {
				 //your magic here :)
			}

You can use this type of permission verification for:

1. Enabling/Disabling mass update option for a defined Role
2. Show different views to different roles - overloading the view.list.php
3. ...etc.etc.etc

4) you shall now

Hope it helps someone else out there!

[bhaskarpal]

Hi,
I need to do something quite opposite i.e restrict privileges through roles.

By default as soon as a new user is created, he is provided full privileges to all modules whereas I'd want him/her to have some very minimum privileges unless specifically assigned through adding to any role.

Can you help me where and what changes need to be done since general user role doesn't show up for editing anywhere.

Sugar version 6.1 community edition.

Thanks
Bhaskar