sendingtk / chatwoot

Other
52 stars 74 forks source link

Custom roles: agents can still access conversations through the search bar #162

Open laianeramos opened 1 month ago

laianeramos commented 1 month ago

Describe the bug

When searching, agents can still find contacts and conversations, even if this access to contacts and conversations is removed through custom roles.

To Reproduce

  1. Create a custom role removing access to contacts or some conversations;
  2. Assign this custom role to an agent
  3. Access the dashboard as that agent
  4. Use the search bar and search for a contact name or term
  5. Contacts and conversations that contain those names or terms will be available for the agent to access

Expected behavior

Agents should not be able to view these conversations and contacts even if they find them through the search bar.

If access to contacts or conversations is blocked for an agent, that contact or conversation should not appear in the search bar; or, even if it appears, he should not be able to open the contact/conversation details, the contact number should be hidden and the messages too.

Environment

Docker

Cloud Provider

None

Platform

None

Operating system

No response

Browser and version

No response

Docker (if applicable)

No response

Additional context

No response