Co-operating Sales Teams

Let us now assume that at some point in time it is decided that in contrast to our original assumptions (see Sample Organization) the two sales teams SalesTeamA and SalesTeamB should be fully co-operating, i.e.

members of SalesTeamB are automatically granted full access (browse/delete/update) to any object created by a member of SalesTeamA, and
members of SalesTeamA are automatically granted full access (browse/delete/update) to any object created by a member of SalesTeamB

This change is easily accommodated with openCRX by making both User Groups SalesTeamA and SalesTeamB members of the User Group Sales. The following figure shows the new security organization:

Figure 5-25. Security Organization with co-operating Sales Teams

To implement this change, login as admin-Standard and navigate to the provider Security Users / Groups. Locate the Local User Group SalesTeamA and load it into the inspector. In the grid Member of User Groups you can use the lookup inspector (click on the looking glass) to locate the Local User Group Sales. Click the checkbox to return to the grid and then click the [+] button to add Standard\\Sales. You should now see the following:

Figure 5-26. Making SalesTeamA a member of Sales

Similarly, make the User Group SalesTeamB a member of the User Group Sales.

To verify the new security configuration, logout and login as sales-repA1 to create a new Contact. The default security settings should correspond to the ones in the following figure:

Figure 5-27. Default Security Settings of Contact created by sales-repA1 (co-operating sales teams)

You can easily verify that not only the Users ceo, cfo, coo, head-sales, sales-repA1, and sales-repA2 are granted full access (browse/delete/update), but the two Users sales-repB1 and sales-repB2 are also granted full access (browse/delete/update) to this Contact even though the User Group Standard\\Sales (or Standard\\SalesTeamB) was not explicitly added to the list of Owning Groups of the Contact (this is what we did in section Grant full access to Sales to grant access to the other sales team).

The following matrix summarizes permissions on the Contact created by sales-repA1:

Figure 5-28. Permissions on Contact created by sales-repA1 (co-operating sales teams)