User can edit supplier payment details even though their role excludes that.

Mike_James

A client rang me to check whether they were doing something wrong. We tested various settings on my own log in, and seem to have the same issue.

 

The user has access to Cards, and under the Cards sub-option, the Supplier Payment details is excluded, and Supplier cards is marked as read-only. Yet the user can edit supplier payment details.

 

The user also has Sales, Purchases and Inventory roles.

 

Is there something else that should be done (within the user roles that is?)

Isaiah_C

Hi @Mike_James,

 

That does sound unexpected. If the 'Cards" access is removed and supplier cards are set to read-only, the user shouldn't be able to edit payment details.

 

It might be worth checking if they have another role assigned that's giving them extra permissions. Sometimes, even if one role restricts access, another one might override it. If a custom role was set up, it's also possible that the restrictions aren't applying as expected. 

 

If that didn't work, it might be best to reach out to our live chat support through our virtual assistant MOCA or submit a case via MyAccount so they can double check the access.

 

Regards,

Sai