Security: Access any record

Access any record: index.php?module=Accounts&view=MergeRecord&records=9 (problem results from the fact that many functions, eg. MergeRecord don’t have a permission layer and display anything you want)

Access any record, comment, history index.php?module=Contacts&view=ListViewQuickPreview&record=8