Telemarketing scripts can overwrite the CONTACT1.ACCOUNTNO field with entered data by the script performing user

Version 1

    Details

    Telemarketing scripts can overwrite the CONTACT1.ACCOUNTNO field with entered data by the script performing user


    [STEPS TO REPRODUCE}

    MAKE SURE TO VERIFY THE STEPS TO REPRODUCE ONLY ON A DEMO DATABASE AS IT WILL OVERWRITE THE UNIQUE IDENTIFIER AND LINK INFORMATION FOR THE PROCESSED CONTACT AND WILL LEAD TO DATA UNAVAILABILITY!

    1. Create a new telemarketing script
    - Go To > Scripts
    - Maintain Scripts
    - New
    - Enter a Script Name
    - Click New to create a new Question
    - Set the 'Update Field' as the Accountno Field

    >> Result: 
    You can select the ACCOUNTNO as a valid field.  This should not be allowed !!

    - Click New to create a new Response
    - Tick the Option ' Prompt for response '



    - Click Ok
    - Click Ok
    - Click Ok
    - Click Close
    - Select the script from the Scripts window
    - Click the response to enter a response
    - Either manually type a response (for Example 'Yes' or 'No') or select from the F2 lookup (this should be blank as it is the lookup for the Accountno field)

    [RESULTS]
    The GoldMine CONTACT1.ACCOUNTNO field for the specific record is overwritten.

    [Notes \ Discussion]
    Although the scripts are not a widely used feature of GoldMine this is a critical issue as customer could think that this field is an custom field and not know it is a system field. 




    Resolution

    [CAUSE] This is RM # 230211  [WORKAROUND] The GoldMine user generating the Telemarketing Script to make sure that ACCOUNTNO is not the field which should be updated