Carriers need to view their own tasks, but they do not need to obtain all orders and internal quotes from shippers. The external entrance to TMS should be authorized based on the partnership, rather than changing the internal scheduling page to a different menu name and handing it over to partners.

How to arrange records and operations

After the order is assigned, an accessible relationship is established, and the account only handles the tasks of the carrier to which it belongs. Queries, attachments, notification links, and exports use the same scope check. Permissions are recalculated after the carrier is transferred, and the historical records retain the necessary searchable range as agreed to prevent tasks from being moved while the old account can still be continuously updated.

The carrier account permissions can be determined based on order allocation, task stage and cooperation validity period. Being able to upload vouchers does not mean that you can modify the order details of the cargo owner, and the internal quotation fields should also be restricted separately. Message reminders on external pages first check the current permissions and cannot allow unassigned tasks to continue to be accessed through the old notification link. After the account is deactivated, to-dos and contacts will be transferred, and historical operations will retain the original owner. When multiple people are working on a task together, record the actual operator to avoid sharing accounts so that all corrections cannot find the source of responsibility.

Specific scenarios that need to be checked

For example, if a partner submits a receipt voucher, he can only modify the delivery record assigned to himself. Test the permissions when modifying address parameters, searching for other tracking numbers, and downloading attachments. After the business contact leaves the job, the account is deactivated and transferred to the to-do list to ensure that the process continues but the original account no longer has an operation entrance.