This commit (Project-Pier/ProjectPier-Core@4bfce24) made a change that client company users can see the 'Time' tab. It allows clients to see both the company's time as well as other client's time (and billings). This seems very wrong to me. Does anyone have an opinion on this? I suspect it would be acceptable to allow the client access to the "Time" tab as long as the results were filtered to only show that client company's time entries, omitting the host company's time and other client companies' times. Opinion's welcome.
This commit (Project-Pier/ProjectPier-Core@4bfce24) made a change that client company users can see the 'Time' tab. It allows clients to see both the company's time as well as other client's time (and billings). This seems very wrong to me. Does anyone have an opinion on this? I suspect it would be acceptable to allow the client access to the "Time" tab as long as the results were filtered to only show that client company's time entries, omitting the host company's time and other client companies' times. Opinion's welcome.