🐛 Possible Bug - Email Permissions Bug in Ops Hub

Environment Observed: Prod & Demo
Account Name: SAFE Credit Union Convention Center & Performing Arts District
Account ID: account-193
Is this a converted account? Unsure. There is a note that says “Formerly Sacramento Convention Center.”
Date Converted (if known): Unknown
Issue Scope: Users with view-only access to accounts and contacts are able to send emails from the Ops Hub contact actions.
Event Name: N/A
Event ID: N/A
Was the issue reported by the client? No, this was observed during internal testing.
Client Contact Name (if yes): N/A
Client Contact Email (if yes): N/A
What’s the problem? In Ops Hub, users are currently able to send an email from the contact section even if they do not have edit permissions for accounts/contact info. As long as a user can view accounts and contacts, they are able to email from there, and that behavior should be blocked.
Is the issue reproducible? Yes, and this has been discussed as a known issue with Elizabeth.
If reproducible, where? Pitstop and in any account with Ops Hub and with users who have view-only permissions for accounts and contacts. Specifically, it’s within the Ops Hub Event Dashboard/contact section.
Pitstop Account: account-193
Pitstop Event ID: N/A
Steps to reproduce the issue:

Log in as a user who can view accounts and contacts but does not have permission to edit them.
Open an event in Ops Hub.
Go to the contacts section on the event dashboard.
Use the email action for a contact.
Observe that the system allows the user to send the email.

Expected behavior: Users with only view access to accounts and contacts should not be able to send email from Ops Hub contact actions.
Troubleshooting steps already taken:
1. Discussed with Elizabeth.
2. Elizabeth has identified it as a bug.
3. The bug has been discussed but not yet submitted through Documentus.
Workaround identified? No identifiable workarounds at the moment.
Attachments available? N/A
Zendesk ticket link (for Support use): N/A

Comments