Users can see other users email

[mtindall]

When we click the all email link every user's email shows up. How can we keep one user from seeing another user's email?

Running:

Linux
Sugar Version 4.2.0a
Apache Web Server

[jlduran]

You can try defining Roles in the admin panel, then assign the role(s) created to user accounts. Check the admin manual for further instructions.

[mtindall]

I upgraded to Version 4.5.0f (Build 1202)

Still having issue.

what should I change the permissions to? can anyone replicate this issue and/or produce a fix?

[davidtoohey]

This is something that is extremely important to me for obvious reasons.

For a start some ACLRoles module opens when choosing Role Management, which then doesn't enable the creation of Roles. I switch to just Role module manually which does allow creation of Roles but appears extremely limited in it's function and only allows entire modules to be included/excluded. I haven't bothered seeing if this works any further.

As this is also not far from useless, I am thinking users can create a folder on the mail server specifically for emails they would like seen on SugarCRM (Open Source) and access this through IMAP... should this work? Must say the email hasn't even worked so far for me as it says the settings are ok when tested then when saving/creating the user it says there is an email problem.

[hbodewes]

When we click the all email link every user's email shows up. How can we keep one user from seeing another user's email?

I am having the same problem, when choosing All Mail. This is critical, even when roles are set to "owner" everyone can see everybody's mail.
Does anyone know another solution (maybe sugar crm themselves? I can't imagine this is a feature in their commercial software. All companies would find it unacceptable, I guess).

Thanks in advance!

Windows XP SP2
SugarCRM 4.5.0f
Apache