Ability to limit terminal actions to Admins only

[ain]

In many scenarios it is desired that only Admins, those with privileged accounts, could delete objects like Accounts, Leads, Campaigns, Tasks. Or, for instance, download XLS files of the whole data.

I'd propose to introduce flag(s) into settings to enable such limitations.

[steveyken]

It would be good to roll out a more flexible security model here. Though this is likely to be time consuming to implement.

One option could be FFCRM passing all actions through CanCanCan and then we provide various ability classes that an admin could choose from to implement their desired level of security, whilst allowing a developer to completely override and implement their own security permissions.

[ain]

:+1:

[che2on]

@ain Sir, Is this feature live? I don't want my users to delete the contacts, leads etc. Is there anyway we can restrict deletion of contacts and leads?