Customer security

From RPM Wiki

Table of contents

1 Summary 2 Staff users 3 Agent users 4 History 5 Future 5.1 Customer security page 5.2 Agent users 5.2.1 View 5.2.2 Edit 5.2.3 If no access 5.2.4 Managers 5.2.5 Customers 5.2.6 Contacts 5.3 Customer contacts

Summary

This page covers all the rules for accessing and managing customer information and everything related to it.

• See Customer, Customer Contact

This does not cover account groups as they are really more of a commissions thing.

Staff users

• All customer use requires "Customers and accounts section"
• If staff user can see a customer, they can see any contacts and locations for it.
• Editing customer information requires the "Edit customers, accounts" privilege
• Adding customers and accounts requires the "Add customers, accounts" privilege
• Adding, editing, and deleting contacts requires the "Edit customers, accounts" privilege
• The "Edit customer contact logon" privilege is for a future version that will allow a customer user to logon. This privilege will let a staff user enable customer users and edit their logon.

Agent users

• If an agent user can see a customer, they can see all accounts and contacts for the customer.
• Agent users can see and edit customer and account customer fields depending on the field security
• Agent users can edit customer info except the customer name

History

• Deimos: Manual control over rep account access
• Themisto: Customer contacts added

Future

Customer security page

This page has settings that affects the power agent and customer users have over customers.

• Agent manager
  • Contacts: "Hidden", "Read" (default), "Edit"
  • Edit contact logon: "No" (default), "Yes"
  • Locations: "Hidden", "Read" (default), "Edit"
• Agent rep
  • Contacts: "Hidden", "Read" (default), "Edit"
  • Edit contact logon: "No" (default), "Yes"
  • Locations: "Hidden", "Read" (default), "Edit"
• Customer contact
  • Locations: "Hidden", "Read" (default), "Edit"

Viewing and editing this settings page is only for staff users in roles with the "Edit subscriber" privilege.

Agent users

Agent user customer security depends primarily on Rep account access (spec)

View

• A rep user can see the details of accounts that they have a relationship with in the rep/account table.
• They have access to the details of customers that they have access to one or more accounts of.

Edit

• If a rep user has access to a customer they can edit all contact information except the name of the customer. They can also edit custom customer fields if those fields are "Read & edit" for agent users.
• If a rep user has access to an account they can edit custom account fields if those fields are "Read & edit" for agent users.

If no access

• If a rep user does not have accesses to a customer, but they do have access to a commission item, summary, or form that references that customer: display the customer name but it is not a link.
• If a rep user does not have accesses to an account, but they do have access to a commission item, summary, or form that references that account: display the account number but it is not a link.

Managers

If a rep has access to an account then so do all agent manager users in the rep's agency.

Customers

Customer access completely depends on account access so if an agent user has access to an account they have access to a customer. If an agent user does not have access to any accounts of a customer they do not have access to the customer.

Contacts

• Agent managers and reps will see contacts for customers they have access to.
• Managing contacts will be controlled by contact settings and agency ownership.
  • An agent user can only edit or delete a contact if
    • Agent users are set to have "Edit" access to contacts
    • The agent user can see the contact (has access to one of their customers)
    • The agent user's agency owns the contact
  • An agent user can add a contact to any customer they can see if agent users are set to have "Edit" access to contacts

Customer contacts

Can see any customer they belong to

• Hidden
  • Commissions
  • Notes for staff
• Read
  • Contacts
• Edit
  • Their own contact info
  • Notes (they can read all notes, add notes, and edit notes they added)
    • As with any user can edit their own logon
    • Can change their primary customer to be any customer they belong to
  • Custom fields (per-field security)

Additional rules

• Can not change the primary contact of a customer or add/remove contacts from a customer
• Can not add/delete contacts

• This page was last modified 14:56, 13 May 2008.
• This page has been accessed 583 times.

---

• History

---

• About RPM Wiki
• Disclaimers
• Special pages