Okan Ogras

It worked, but why do I give delete rights for Groups and end-user fields? This will create another problem with role-based access control. Why can't they only see organizations? Why are we giving delete rights only for viewing? So, these users can delete groups as they want.  If we want them to see organizations, we should allow them to play with user groups as they want or delete fields in the user profile!!!!! Is that it? Amazing. No one considers the security I think?