Crm cross-company data leak closed

Summary

While Crm loaded staff and menus, another company’s rows could briefly appear. Permission and module queries now use only the signed-in company.

What changed / was fixed?

• While Crm loaded staff and menus, another company’s rows could briefly appear.
• Permission and module queries now use only the signed-in company.
• Staff definitions and pickers return only your company rows.

What should you do?

• You can your Crm session and open the Staff list again.
• You can should see only your company rows; report any unexpected row to support.
• You can after package install, ask all Crm users to refresh their session once.