user access controls
user access controls
(OP)
To preface this is my first post and I only do so to confirm my own suspicions based upon what I have found in my own searches for answers to my current problem.
Like most IT out there I am presented with older systems and software and expected to make it work without the ability to upgrade anything. We are currently using Goldmine Corporate Edition Ver 7.00.60526.
Our company has a policy that if a potential sales lead is off limits to other salespeople as long as the salesperson in question has maintained some form of contact with the lead in the last three months. The problem lies in the fact that the salespeople (potentially - until proven otherwise) have the ability to alter entries created by other salespeople. Removing the "edit tab folders" to the salespeople solves the issue but it also makes them unable to open the entries to view their content (unless I am mistaken and if I am please tell me). I have removed the "delete" option under contact record but upon testing it would appear that they are still able to delete entries in the history tabs so I'm not sure what this actually controls. I am hoping the section under user settings/access/access to others may hold the answer but none of the texts I have found seem to mention it's usage. (btw sorry if this seems to ramble but I'm typing this while also doing work). So if I am correct in assuming that this version is incapable of restricting access in this regard, Is there instead a built in function to allow for a running log of alterations of records? If this is also a no, is anyone aware of exactly how alterations are performed between Goldmine and SQL? So for instance if I was to edit an entry in the history tab and change the date that the entry occurred on, would it do this via a update string in SQL so that I could build a trigger to log any updates to conthist where createby <> lastuser?
Like most IT out there I am presented with older systems and software and expected to make it work without the ability to upgrade anything. We are currently using Goldmine Corporate Edition Ver 7.00.60526.
Our company has a policy that if a potential sales lead is off limits to other salespeople as long as the salesperson in question has maintained some form of contact with the lead in the last three months. The problem lies in the fact that the salespeople (potentially - until proven otherwise) have the ability to alter entries created by other salespeople. Removing the "edit tab folders" to the salespeople solves the issue but it also makes them unable to open the entries to view their content (unless I am mistaken and if I am please tell me). I have removed the "delete" option under contact record but upon testing it would appear that they are still able to delete entries in the history tabs so I'm not sure what this actually controls. I am hoping the section under user settings/access/access to others may hold the answer but none of the texts I have found seem to mention it's usage. (btw sorry if this seems to ramble but I'm typing this while also doing work). So if I am correct in assuming that this version is incapable of restricting access in this regard, Is there instead a built in function to allow for a running log of alterations of records? If this is also a no, is anyone aware of exactly how alterations are performed between Goldmine and SQL? So for instance if I was to edit an entry in the history tab and change the date that the entry occurred on, would it do this via a update string in SQL so that I could build a trigger to log any updates to conthist where createby <> lastuser?
RE: user access controls
Do this properly, and you will achieve your goal.
DJ Hunt
Phone: (978)2-3333
WebSite: http://www.DJHunt.US
- GoldMine Premium - The Definitive Guide
- One-on-One GoldMine Technical Support ( Fee Based )
http://www.DJHunt.US
RE: user access controls
For Delete functionality
CODE --> SQL
For Update capability
CODE --> SQL
For Insert capability
CODE --> SQL
RE: user access controls
Also note that while your triggers will work for most history, record types (CONTHIST.SRECTYPE) of M are unusual in that they link to MAILBOX records. Unexpected rollbacks of those could cause weird results/errors.
Beyond that, if you have any SYNC happening (with Outlook, remote users, handheld devices, etc.) your rollbacks will not be respected unless you also go after the CONTTLOG/GMTLOG records associated...
Doug Castell
Castell Computers
www.castellcomputers.com
RE: user access controls
To give further insight into my situation, this company has been using this software since 2006 where all notes are available to everyone to view. After three months of inactivity of a customer, another salesman is therefore able to step in and steal the account from the former account manager and by utilizing the other peoples past notes can tailor the sales pitch to avoid known subjects that might anger the customer. I have been tasked with maintaining this form of collaborative work/back stabbing your fellow man type of business model but ensuring the integrity of the data contained within.
Also I had attempted my trigger theory as a workaround until I could implement your suggestion and found that either my understanding of trigger implementation is flawed, or that the processes Goldmine uses to implement changes is misunderstood on my part. The Delete trigger does not work at all, and the update and insert triggers block everyone regardless of what qualifiers I put in.
RE: user access controls
I'd say a nightly SQL job that looks for records that haven't been touched in three months and updates their ownership would be a way to release those records into the wild. Maybe that job could also put 'AVAILABLE' in the sales person field. That way, the sales people could have something to look forward to in the morning -- the race to search out the newly available customers and pounce on them before their brethren do.
To facilitate that pounce, I'd probably implement a trigger (or lookup.ini) mechanism to update the owner field when the salesperson field is updated. (to avoid a 'double pounce' at 7:59am)
Doug Castell
Castell Computers
www.castellcomputers.com
RE: user access controls
RE: user access controls
RE: user access controls
DJ Hunt
Phone: (978)2-3333
WebSite: http://www.DJHunt.US
- GoldMine Premium - The Definitive Guide
- One-on-One GoldMine Technical Support ( Fee Based )
http://www.DJHunt.US
RE: user access controls
RE: user access controls
Issue:
Hi Guys
I created this trigger for extended details and seems to work. The extended details tab is called 'Invoice' and the only GoldMine user that can change information on this tab is 'FINANCE'.
Thought this information would be handy for people wanting to do the same thing.
Resolution: ( Not Tested - Forum User Sukh )
CREATE TRIGGER deny_invoice_update
On Contsupp
FOR UPDATE
AS
BEGIN
Declare @contact varchar (20)
Declare @lastuser varchar (20)
SET @contact = (select contact from Inserted)
SET @lastuser = (select lastuser from Inserted)
if (@contact='invoice' and @lastuser<>'FINANCE')
BEGIN
RAISERROR ('You are not authorised to change information on this tab', 16,1)
rollback transaction
END
END
I hope that this sends you in the correct direction.
DJ Hunt
Phone: (978)2-3333
WebSite: http://www.DJHunt.US
- GoldMine Premium - The Definitive Guide
- One-on-One GoldMine Technical Support ( Fee Based )
http://www.DJHunt.US