NetSuite WMS Security Risk - General Question: Fro...
# inventory
a
NetSuite WMS Security Risk - General Question: From what I have seen NetSuite WMS requires "Bulk Manage Roles" permission for any role to utilize their mobile solution (2019.2+). This would be a security risk given that provisioning this permission to any role would allow it to View, Create, Edit, and Delete roles. My greatest concern is in relation to the edit access, as users can go edit their own role (or other roles used by themselves or colleagues) and provide all levels of access within the system. I have raised my concern with NetSuite, but this issue has unfortunately been classified an "enhancement" (606497). For anyone who is currently using NetSuite's WMS, are you aware of this security risk? Have you taken any action to address this risk?