fiogf49gjkf0d It' s the other way around.
A Group is a record in the Plugin table. When you 'share' it, a new record is inserted that has the USERID populated with whomever you released\shared the group to. Team\Department (SECCODE table entry), Everyone, Individual User.
If the user with the Added Role has that Group shared to them (via explicit UserID, Implied EVERYONE, or happens to be a User on the Team) then they will see the group. Whichever groups they belong to will determine which records will appear in the group.
so two different types of 'security' coming into play.
which groups a user can access in the client application is defined by which teams the user is on and what teams or users the groups are release to.
Once they can see the group (i.e. it's shared with them), then SalesLogix will deliver rows on that group based on the group's SQL AND the SECCODE (owner) for each row and that user's Team (SECCODE) memberships.
So you could release the Group to the Midwest team. If your user is on the team then they will see the Group. The Group query is all Account's in North America. If individual account's have a Team owner of the Midwest Team then you will see the account on the group.
|