Member Role Security Issue | Voters

Member Role Security Issue

complete

Cuatro

Users with member role are able to open the customer overview screen (/accounts) by directly opening the URL and although they only see the account they are allowed to see, they can create new customers that are actually successfully created in the system.

November 28, 2023

Dylan

marked this post as

complete

Customers have been completely restricted from accessing the organization settings and other accounts.

Note: Newly invited customers will have the correct access. Admins may wish to revoke access and reinvite existing customers.

Jonty Hodge

marked this post as

in progress

Jonty Hodge

Thanks for alerting us to this Cuatro! We will be releasing some updated access control features very soon that will sort this out.