# Core Workflows not blocking users from changing customer details

**URL:** https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436
**Category:** Technical assistance
**Created:** [May 27, 2024, 9:40am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436 "2024-05-27T09:40:04Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![skip](https://community.zammad.org/user_avatar/community.zammad.org/skip/32/8559_2.png) [@skip](https://community.zammad.org/u/skip)
#### Post date: [May 27, 2024, 9:40am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436/1 "2024-05-27T09:40:04Z")

</div>

### Infos:

- Used Zammad version: 6.3.0-1713857963.c5266fae.jammy
- Used Zammad installation type: package
- Operating system: Ubunbu 22.04
- Browser + version: Firefox 126.0 (64-bit)

### Expected behavior:

- Agents not being able to modify any customer information

### Actual behavior:

- Agents can still change organization affiliation

### Steps to reproduce the behavior:

- Set up a `Core Workflow` to avoid non-admins from changing or seeing information  
 ![image](https://community.zammad.org/uploads/default/original/2X/9/9774a94e74411e318bf379bdea836436606fd58e.png)  
 ![image](https://community.zammad.org/uploads/default/original/2X/7/7ae675679b8cb3456f00ef78bde141338ee9fa14.png)
- Login as (non-admin user/agent) and try to edit customer information it is still possible to add/remove the `organization`, `secondary organizations`, `notes`, `active status` of the usuer  
 ![image](https://community.zammad.org/uploads/default/original/2X/b/b34f2d05a7878c70d265f9dad065871813320b78.png)

### Notes

Did I miss the setting anywhere because I cannot see it in the dropdown

 ![image](https://community.zammad.org/uploads/default/original/2X/1/1e8ba0d13c818f745e5699d38d44d52275b662d4.png)

Thanks a lot!  
Skip

---

<div class="post-metadata">

### Author: ![skip](https://community.zammad.org/user_avatar/community.zammad.org/skip/32/8559_2.png) [@skip](https://community.zammad.org/u/skip)
#### Post date: [May 30, 2024, 11:48am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436/2 "2024-05-30T11:48:25Z")

</div>

Is this a bug?  
Shall I file one on GitHub?

---

<div class="post-metadata">

### Author: ![MrGeneration](https://community.zammad.org/user_avatar/community.zammad.org/mrgeneration/32/9260_2.png) [@MrGeneration](https://community.zammad.org/u/MrGeneration)
#### Post date: [June 22, 2024, 11:19am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436/3 "2024-06-22T11:19:44Z")

</div>

I’d say that’s a bug.

---

<div class="post-metadata">

### Author: ![skip](https://community.zammad.org/user_avatar/community.zammad.org/skip/32/8559_2.png) [@skip](https://community.zammad.org/u/skip)
#### Post date: [October 16, 2024, 10:47am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436/4 "2024-10-16T10:47:12Z")

</div>

As workaround I am using a custom CSS to hide the Edit button in the drop-down.

⚠This CSS hides the edit button for the User and Organization settings, also for the Admin!

```auto
li[role="presentation"][data-type="edit"] {
  display: none;
}

```

---

<div class="post-metadata">

### Author: ![system](https://community.zammad.org/uploads/default/original/1X/5c5afaea2d23f811dbec33cd4edb02fa29d3262f.png) [@system](https://community.zammad.org/u/system)
#### Post date: [October 23, 2024, 10:48am UTC](https://community.zammad.org/t/core-workflows-not-blocking-users-from-changing-customer-details/14436/5 "2024-10-23T10:48:08Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.