Security issue !!!!

following situation.
I run a Real Estate Office with a few employee. And i use OS Property. I super admin with all access. My agent is admin and some are manager. But why do they have access to the configuration of OS Property? So everybody could go and change the paypal ID and all funds would go this his/her account. Or make any other changes. Their should be for some group they have access to do only add and manage property. I am sure you get the picture. I see that as a big security risk.

Hi Mark,
From OS Property 2.9.0, OS Property has feature to setup the tasks at Back-end for each specific user groups.
If you don't want one specific group to be able to access to Configuration, you can setup Not Allowed to access to Configuration page. Have you tried this feature?
Thanks
Dam

Then a question where can i find that feature?

Hi Mark,
You can go to Back-end > OS Property > Dashboard > Click on button Option at Top-left. You will go to the page where you can manage the permissions of Back-end tasks. But please remember this feature only be added into OS Property from version 2.9.0
Thanks
Dam

i using 2.9.0 but it not their. It only has access administration interface and i can select inheritate , allowed and denied for some groups.
I looking for different permisson of some group. but all group should have access to the back end to manage the os property.
so group admin must have access to the admin section
group manager have access to but not to configuration.
group agent have access to but not to configuration and not to install sample data and not to help and not to export or import.
if i click the option button as you say it has only a general function to allow total access or not. is more a yes or no access. but not what he is allowed to use within the os property. if you look under Articles you have more choices like Configure ACL & Options, Configure Options Only, Access Administration Interface, Create, delete, edit, edit own. it look for such think like that to say agent 1 only is allowed to insert properties from the admin section but does not have access to configuration tab.

Hi Mark,
I think you need to redownload OS Property to get the update. Because from OS Property 2.9.0, OS Property has full ACL functions. Please see my screenshot.
Maybe you download OS Property several days ago so we didn't update this feature.
Thanks
Dam