Particular company user access another company data

[ashu090102]

suppose I have create a master user and company from admin, asssign user to all permission, when login with that user find under settings another company save data, so I think it is big issue you can see it like smtp settings, mail server, ticket type other company show , so in this case user use anothor company settings data like department, smtp settings, ticket type , linked in integration

[horilla-opensource]

Hi @ashu090102 ,

When a master user is created in the admin panel and assigned all permissions, the user is able to access and view data from other companies once logged in.

User is granted permission to change company, they can switch company context also modify configurations and records belonging to other companies.

Please update the user permissions by excluding the permissions that come from the Base app’s Company model.