Privacy Issue: "New Staff Member" New Hire
Under ConsiderationNewly hired staff members with the role of "Sales Team Member" have the ability to access other staff members' customer information, accounts, and orders by following these steps:
1. New Staff Member: Log in
2. Navigate to create quote > selected customer from list > once loaded click on customer name > click payment > Now you can view all order placed by this customer > click on an order number to gain access.
According to Deconetwork, a Sales staff account should only be able to access orders/quotes assigned to them in Business Hub to maintain privacy (See attached). However, this potential loophole poses a significant risk to the privacy of other sales staff members, customers, and company as whole. It's uncertain whether Deconetwork is aware of this issue.
Thank you,
John

Please sign in to leave a comment.
Comments
0 comments