Discussions
Join us for complimentary one-day events around the world and step into a future fueled by AI and limitless potential. Explore new breakthroughs, sharpen your skills, and connect with experts who are shaping what’s next. Experience bold keynotes, interactive learning, and connections that span the global NetSuite community. Discover what's next at SuiteConnect Tour 2026.
Too many security holes in NetSuite
This is unbelievable. I can't believe the lack of security applied to NetSuite when it comes to permissions and roles. Here's a couple of examples:
1. Set up a saved search to lookup customers with specific fields set (to ensure that the user can only see customers with these fields set). Restrict the saved search for 'Customers' to the user's role.
Result: Run the saved search under the specified role and only the customer's you expect show in the list. HOWEVER, in the lower right is the 'Edit View' button to allow them to edit the view. In other words, you CANNOT prevent the user from editing a saved search! You can stop them from saving it under the same name but they can edit it, remove the criteria that prevents them from seeing other customers, hit the preview button and voila, they have view and access to the list of customers you don't want them to see. SAVED SEARCHES ARE