BY DEFAULT Ginesysweb-Action-Export to excel IS GIVEN TO ALL USER AND IT IS NOT REGULATED FROM ROLE OF USER.
THIS IS VERY DANGROUS RIGHT AS ANY DATA INCUDING CUSTOMER MASTER AND VENDOR DATA
CAN BE EXPORTED OR CAN BE THEFT
THIS OPTION SHOULD BE GIVEN ACCORDING TO
USER ROLE POLICY
PLS TRY TO MAKE IT
Export to excel of data base should be in role base, it should be kept in report section, so that admin can decide the permissions to only respective users. It is not idea, it is manadorty. otherwise no secuirty for the database.
Attachments Open full size