Team supervisor role?

[stevejacobs]

Hi
Ive been trying to find a solution to this for a while and havent worked it out. I have two teams of 5 users each, and each team has a supervisor. I have each user limited to access only their own accounts, contacts etc. I want the supervisor of each team to be able to access all of the accounts, contacts etc of all members of his/her team, but to have absolutely no visibility of accounts etc in the other team. There is an overall administer of course who can access all. What is the best way to accomplish this?

I suppose I am missing something really simple that will let me do this. Thanks in advance

Steve

[stevejacobs]

PS. Each team member must only be able to see his own accounts, and not those of other members of his/her own team. In this particular application, for this organisation, this is a legal requirement.

[andopes]

Hi, Steve.

I believe it can be done using the Roles module.
There is an action which restrict visibility for just the own records.

Cheers

[stevejacobs]

Thanks, but I have done that already. I need the team supervisors to see all records of their own team members (users) but not records from another team

[andopes]

Hi, Steve

What is a Team in your Business?
The TeamsOS itself or just a custom field you just created?

Cheers

[stevejacobs]

A team is five people who report one supervisor. In SugarOS we have tried a few approaches (departments, roles), but the closest has been creating a custom field and adding a dropdown to the basic search with the team names (in our case Green and Blue) to filter records for the team leader. I'd like to make that a fixed function for the team leader of the Green group - they should only see all records created by all members of the Green Team, and none of the Blue team.

I am developing this for an organisation that delivers social services to clients. Each client is a family, so we have used Accounts for family, and contacts for family members. Each team member deals only with their assigned families. I've gotten everything working ok except for getting correct restrictions on the team supervisors. Restriction is a must because of confidentiality issues.

[andopes]

Hi, Steve

Let me see if I understood properly.
Your system has several users, some from Blue Team and other from Green Team.
Supposing the Steve user belongs to Green Team, so when this user goes to Tasks ListView he should only see the tasks related to the Green Team.
Is that right?

If you then you can do that creating a logic_hook after_retrieve in the Users module.
This logic_hook can always forces the Search and inject the team_id into it.
This way you can make sure the user belonged to Blue Team only will see records from Blue Team.

Cheers

[stevejacobs]

Not quite right. What I wanted was members of the green team to only see the clients (accounts) and other information relating to them that they own. However the green supervisor needs to see all information from all members of the green team. I installed the SecuritySuite module yesterday and managed to get what I wanted. I did this by creating two security groups (green and blue), and two roles (rep and supervisor). I set all necessary permissions for reps to 'owner' and supervisors to 'all', except for lists, which I set to 'group'. I think I've got what I want now, but let me know if you can think of a better way to do this.

Thanks

[andopes]

Hi, Steve.

The Security Suite is a good open source feature, and if it is working for you, good!
But if you would like to play another implementation (and you know php and sugar programming) you can create the logic_hook I mentioned, it will work, but with some modifications.

Best regards

[gianluca.calloni]

Not quite right. What I wanted was members of the green team to only see the clients (accounts) and other information relating to them that they own. However the green supervisor needs to see all information from all members of the green team. I installed the SecuritySuite module yesterday and managed to get what I wanted. I did this by creating two security groups (green and blue), and two roles (rep and supervisor). I set all necessary permissions for reps to 'owner' and supervisors to 'all', except for lists, which I set to 'group'. I think I've got what I want now, but let me know if you can think of a better way to do this.

Thanks

Hi stevejacobs...

I've got the same necessity.,,,

Can yoiu explain me how assign the supervisor and the member of the tem to groups and-or roles, to ha ve the following situation:

user A
user B
user C

they can see only the accounts thet they are owner.

teammanager A

he must see all the account of user A B, but no the accounts of user C..

Sorry for my english.. is so bad....

Thank's for the answer..

Ciao

Luca