Security, limitations and troubleshooting

Understand why menu visibility is not permission

A disabled menu entry is hidden from navigation but the module does not revoke route or record permissions. The guide then takes you through the correct route, the checks to complete before making changes, the workflow in order, and the evidence to review afterwards.

Audience: CRM administratorsPermission: Administrator / technical supportModule v2.3.0
Jump to steps
Where to goAdmin Area → Setup → Menu Setup
Before you start
  • Verify the module is active and use the exact navigation shown above.
  • Use an account with the stated module and core CRM permissions.
  • Use known test records when changing statuses, visibility, saved filters or global navigation.

What you’ll accomplish

A disabled menu entry is hidden from navigation but the module does not revoke route or record permissions. The instructions below follow the supplied module’s live menu, controller, form, model and JavaScript flow.

Follow these steps

  1. Reproduce the behaviour with a controlled administrator account.
  2. Use CRM roles/capabilities to control access and use the builder only for navigation presentation.
  3. Test the resulting navigation with an administrator and a restricted staff account.
  4. Reset or restore the intended menu configuration after the test.

Fields and options to review

Verified behaviourA disabled menu entry is hidden from navigation but the module does not revoke route or record permissions.

Rules the system enforces

  • A disabled menu entry is hidden from navigation but the module does not revoke route or record permissions.

How to confirm it worked

  • Understand why menu visibility is not permission completes without a validation or permission error.
  • The refreshed report, menu or saved-template page shows the expected state.
  • A second authorised user sees only the records and navigation allowed by their core CRM permissions.

Security, privacy and operational checks

  • Test changes with a non-production record or a controlled administrator account before wider rollout.
  • Do not use navigation visibility as a substitute for core CRM record permissions.