Object CRM_ORD_OP is the correct one, but be sure that you have aso closed object CRM_ORD_LP, otherwise the user will still have all the privieges defined in that object.
Regards.
Hi,
I have maintained only CRM_ORD_OP with parnter function category 0008.
Other objects CRM_ORD_LP and CRM_ORD_OE are inactive.
Still the user is able to open attachments of an opportunity of which he is not a partner.
Regards,
PP
HI,
Users open the attachments from WebUI- opportunity transaction.
If you have objects CRM_ORD_LP and CRM_ORD_OE inactive and in CRM_ORD_OP maintained only combination (for example):
Activity *
Partner Function *
Partner Function Category 0008
then this should work 100%. Because that means that user will be able to open only his opportunities and consequently only this attachments.
But be sure that user doesn't have also ptivileges to authorization objects CRM_ORD_LP and CRM_ORD_OE in some other pfcg role.
And if you just change pfcg role, also be sure to reset buffers with /$sync otherwise in cache you can still have old privileges.
