- Issue created by @bluegeek9
- 🇺🇸United States jdleonard Austin, TX, USA
To discuss: how a Drupal User can manage multiple CRM Contacts and whether/how that relates to CRM User.
Best practice for security is one login (Drupal User) per human who needs to log in. I propose that we design against "organizational" Drupal User accounts.
In addition to tracking that a Drupal User and a CRM Contact represent the same human, we will eventually need a way for a Drupal User to manage any number of CRM Contacts for which they are authorized.
- 🇺🇸United States bluegeek9
Only individual contacts can be used with crm_user. There cannot be an organizational crm_user.
Access control of contacts is best handled with the group module.
Additional access control can be provided by something similar to node_access, crm_contact_access