Permissions in 4.0 reverting back

Bokk

We have had many problems implementing permissions in an upgrade for 4.0 (from 3.10). We had to add access to many roles initially just to get basic order functionality. We thought we had it sorted out.

Now, almost a week later, we have had users who could do a task through the week, then today they get a permissions error. I can't think of any reason permissions would be changing. It is complicated by the fact that if we have to re-synchronize, all the users have to get off the system.

Any insight would be great!!

Thanks!

kriki

It can be that they used something that you haven't tested when putting the permissions (Eg. Sales header. You tested it without invoice-discount and the users are using invoice-discounts).
The best way to find all objects accessed is starting code-coverage and doing all the things the users would do. Afterwards you know all the objects involved in the action.