{"action":"opened","issue":{"url":"https://api.github.com/repos/frappe/erpnext/issues/2689","labels_url":"https://api.github.com/repos/frappe/erpnext/issues/2689/labels{/name}","comments_url":"https://api.github.com/repos/frappe/erpnext/issues/2689/comments","events_url":"https://api.github.com/repos/frappe/erpnext/issues/2689/events","html_url":"https://github.com/frappe/erpnext/issues/2689","id":56514814,"number":2689,"title":"Permission / Access Control on list view","user":{"login":"vikramnarayan","id":4680031,"avatar_url":"https://avatars.githubusercontent.com/u/4680031?v=3","gravatar_id":"","url":"https://api.github.com/users/vikramnarayan","html_url":"https://github.com/vikramnarayan","followers_url":"https://api.github.com/users/vikramnarayan/followers","following_url":"https://api.github.com/users/vikramnarayan/following{/other_user}","gists_url":"https://api.github.com/users/vikramnarayan/gists{/gist_id}","starred_url":"https://api.github.com/users/vikramnarayan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vikramnarayan/subscriptions","organizations_url":"https://api.github.com/users/vikramnarayan/orgs","repos_url":"https://api.github.com/users/vikramnarayan/repos","events_url":"https://api.github.com/users/vikramnarayan/events{/privacy}","received_events_url":"https://api.github.com/users/vikramnarayan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-04T11:26:47Z","updated_at":"2015-02-04T11:26:47Z","closed_at":null,"body":"Forwarding issue to Github for tracking. It was found that access control applies only for internal screens and not for list view. Hence details on sales order / purchase order etc are viewed by all inspite of bringing access control on them. Please address this issue at the earliest.\r\n\r\nThanks,\r\nVikram\r\n----------------------------------------------------\r\n\r\n---------- Forwarded message ----------\r\nFrom: ERPNext Support <support@erpnext.com>\r\nDate: Wed, Feb 4, 2015 at 4:47 PM\r\nSubject: [WN-SUP11212] Field level access control\r\nTo: vikram.narayan@agrilife.in\r\n\r\n\r\nVikram,\r\n\r\nSorry was our list views are not permission controlled. Please post this issue on Github.\r\n\r\nhttps://github.com/frappe/erpnext/issues\r\n-- \r\nThanks and Regards,\r\nUmair Sayyed\r\nwww.erpnext.com\r\n-----In response to-----\r\nPlease reply above this line or remove it if you are replying below it\r\n\r\n\r\n\r\nHI Umair,\r\n\r\nThis has worked once and have been able to restrict the various users from\r\nviewing prices. However in the basic screen wherein for example all the\r\npurchase orders are listed, the PO amount are coming up even though the\r\nuser does not have access inside.\r\n\r\nE.g.: PO00229 is showing the amount here in below screenshot even though it\r\ndoes not show the same in the detailed screen. How can this be controlled?\r\n\r\n\r\n[image: Inline image 1]\r\n\r\n[image: Inline image 2]\r\n\r\n\r\nThanks,\r\nVikram\r\n\r\nOn Thu, Jan 29, 2015 at 4:46 PM, ERPNext Support \r\nwrote:\r\n\r\n> Hello Vikram,\r\n>\r\n> You can use Perm Level functionality for field level permissions.\r\n>\r\n> https://erpnext.com/kb/setup/managing-perm-level\r\n>\r\n> For permission to report, they will atleast need \"Read\" permission. The\r\n> idea is if they can read/access transaction details in the report, then why\r\n> not in transaction directly. Its one and the same thing.\r\n> --\r\n> Thanks and Regards,\r\n> Umair Sayyed\r\n> www.erpnext.com\r\n>\r\n"}}