When someone sends an email via Vtiger 6.5, it is displayed on the history widget on the dashboard, then users who have no rights to view emails can read it. Same bug also exists in the global search.
Users without permission to view emails of other users, can search for them by Global Search and can read them.
I need a fix to ensure privacy rules are in forces for these 2 features. Sent emails must be seen only from users who have permission to see it.
Perhaps there is no user permissions check before the email is displayed.