User with 'Can Create' access can create by navigating to app but can't create from a related items field

@Leo we have discovered that sharing ‘can create’ access on record level settings doesn’t work from all directions.

We have an app that exists in a closed workspace, we’ll call it workspace B. The settings are configured to have record level access shared via a member field in the app, and via the created by rule.

When a restricted user navigates to that app, the appropriate settings work. They can’t see other peoples records, however they can see the records shared with them and they are allowed to create new records which subsequently get shared to their user.

That all works great.

In another sales pipeline app which is in our primary ‘workspace A’ all members do have access, there’s a field where that restricted app is configured as a related item.

The desire is for users to click on the “new” button from there to create items without having to navigate away.
It works perfectly for users with full access to workspace B. But for the users with restricted access, the “new dice panel” button is not clickable from this app in workspace A

There’s a chance that I’ve just misunderstood a permissions setting somewhere and applied it wrong. But I’ve tried hard to experiment with every possible configuration option and I can’t seem to get it to work as expected.

I can share an example video or further notes if necessary demonstrate the problem.

1 Like

Hi @CarsonRedCliffLabs,

thank you so much for uncovering this issue and for the very detailed analysis :100:

You’re right, this is a case we apparently missed. The Can Create Only permission should of course also be respected when creating a related item from another app, and based on your testing that currently isn’t happening.

We already handle this permission in many other places across Tape, but this specific path seems to have slipped through.

We’ll adjust this and let you know as soon as the fix is live.

Thanks again for taking the time to investigate this so thoroughly. That’s extremely helpful for us.

Cheers,
Leo

1 Like

Hey @CarsonRedCliffLabs,

good news! We rolled out an major upgrade to our Can Create Only permissions today💯

This should permanently resolve your issue and ensure that the permission is automatically respected in all relevant places going forward.

Could you please double-check your use case and confirm that everything is now working as expected?

Thanks again for bringing this to our attention!

Cheers,
Leo

2 Likes