Michal

The essence of the way in which Sage CRM's security works is that if you need to see a communication then you must be able to see all the data that is linked to the communication within the view. So to look at a communication for a company then you must be able to 'see' the company, the person and the case, lead or opportunity to which that communication is attached.

If they are to have rights to all tasks in the system then they will need to have top level security rights. This means that they would be in the worldwide territory.

But having rights to see data, is different from being given access to tabs like the 'Find Company' or 'Find Opportunity'. Access to these are be guarded not just be the security policy but the SQL clause. You can restrict access to parts of the system by adding a clause into the sensitive parts of the system.

If you don't want to add all the SQL Clauses in to all the different tabs then you could in Sage CRM 7.2 use the clientside API.

You can have a clientside file automatically load and be checked in every screen.

The script could look for the current user details and then hide all the tab options that they are not allowed to see.