Create the ability to restrict who can assign certain solicit codes

Constituents should only be assigned the "Sanction_Red_Flag" code from an import out of our external Student1 DB.

No user's should be able to assign the "Sanction_Red_Flag" solicit code

  • Guest
  • Jul 1 2020
  • Reviewed: Voting Open
Security
  • Attach files
  • Vienna Harrison commented
    19 Aug 18:47

    There are discrepancies in security between database view and webview. Something restricted in database view should also be restricted in webview. This is one of those areas where permission restrictions don't transfer and it's concerning.

    Attachments Open full size

Related ideas