Currently adding the "Access all webform results" allows the user to see the 'Webform' tab which grants access to the webform fields. It would make more sense to separate this privilege to a "Access all webform fields" so that only 'Results' tab shows and not confuse the user with form settings and field administration.

Comments

Swede’s picture

Issue summary: View changes

I have noticed this idea has not been answered. I agree with this post, currently today we installed webform and we noticed users had access to the webforms and it's fields. We thought it was an issue with domain access and webform but after looking into this, I'm guessing this is how the module was created. We would like the users to see the results of the webform but not allow them to create, modify or delete the webform and it's fields. If anyone has found a work around for this, it would be appreciated.

danchadwick’s picture