This is Serious.
I have employees who share sixbit database from a server, using remote desktop.
It just came to my attention, that you can have access to mostly everything including Sixbit ID registration, server agent, even if you restrict employees to view these modes, and more...
Here is an example for a user with ONLY access to Sell Items mode:
Now you login with this user, and you see Sell Items, as it should be.
Underneath the Mode Menu, there is an arrow to "configure buttons" its available, and through it, you can view all other modes, and have potential access like exporting live listings,complete regular access for sales orders, even though non of these permissions are checked.
Have access to support mode, and view sixbit license registration.
The worst is when you set a user to NOT view any mode. (I'm not indicating this makes any sense) to have a user not seeing any mode, but i'm just pointing this out: The Support Mode is set to be viewed by default. and that's the way to get your reg info.
Access is available to sixbit agent (which should be only for admins) by clicking the top-left Main button, also refreshing database, seeing event logs, etc.
Access to the quick access toolbar is available, with many options like viewing analysis...
Oh and these 2 permissions, keeps rechecking themselves after making sure they are unchecked.
and last, when sixbit receives a new buyer message, an icon appears under the modes menu, which allow any limited user to open it and respond, mark as read, or answer buyers. Please make a specific permission for this. 90% of our users are strictly listers, and they don't need to have any other access.
please fix, much appreciated.