- This topic has 9 replies, 2 voices, and was last updated 4 years, 6 months ago by
.
-
Posts
-
We would like our ‘sales manager’ to set pricing levels by selecting any user capability ( ex. customer / trade / wholesale ) but not accidently set a customer to their own level ‘sales manager’. When testing as a ‘sales manager’ their own level shows as an option in the user area. How can I remove their own user level not to show as an option here?
Hi Chris,
Using “User Level Permissions” you can remove higher level roles. That means they will be able to promote users up to “Sales Manager”. So its not possible with current implementation.
Let me see whether I can give you a custom code to work around this issue.
Thanks
Syam
I’ve found another security hole. The user has access to Users : Assign/Migrate where they can assign a user to theirs and other roles. How an I allow this user to use the User module and limit this user from the Assign/Migrate function?
Hi Chris,
Are you saying that the custom code I gave you doesn’t work in the “Assign/Migrate” page? Or is it something else?
Thanks
Syam
Yes. The code you provided works perfectly. Thank you.
However the option to self-promote still shows in the Secondary Roles section.
Can you provide a code fix for this as well?
- You must be logged in to reply to this topic.