diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-role.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-role.png old mode 100755 new mode 100644 index 4fb5a8f9..bf4bf6ec Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-role.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-role.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-user-permissions.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-user-permissions.png old mode 100755 new mode 100644 index 0d9d8f66..4049c7d6 Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-user-permissions.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-employee-user-permissions.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-manager-role.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-manager-role.png old mode 100755 new mode 100644 index 2a260c14..31567cab Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-manager-role.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-manager-role.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-user-role.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-user-role.png old mode 100755 new mode 100644 index eab8d57a..8f7574dc Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-user-role.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-hr-user-role.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-application.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-application.png old mode 100755 new mode 100644 index cd4e38f5..74af332c Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-application.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-application.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-approver-role.png b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-approver-role.png old mode 100755 new mode 100644 index b7b6770d..17356bd2 Binary files a/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-approver-role.png and b/foundation/www/docs/assets/img/users-and-permissions/setting-up-permissions-leave-approver-role.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/user-perms/advanced-control.png b/foundation/www/docs/assets/img/users-and-permissions/user-perms/advanced-control.png new file mode 100644 index 00000000..1b0c9f72 Binary files /dev/null and b/foundation/www/docs/assets/img/users-and-permissions/user-perms/advanced-control.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/user-perms/new-user-permission.png b/foundation/www/docs/assets/img/users-and-permissions/user-perms/new-user-permission.png old mode 100755 new mode 100644 index d9e1a6a2..fb4b2679 Binary files a/foundation/www/docs/assets/img/users-and-permissions/user-perms/new-user-permission.png and b/foundation/www/docs/assets/img/users-and-permissions/user-perms/new-user-permission.png differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/user-perms/select-document-types.png b/foundation/www/docs/assets/img/users-and-permissions/user-perms/select-document-types.png deleted file mode 100755 index b54d36ac..00000000 Binary files a/foundation/www/docs/assets/img/users-and-permissions/user-perms/select-document-types.png and /dev/null differ diff --git a/foundation/www/docs/assets/img/users-and-permissions/user-perms/view-selected-documents.png b/foundation/www/docs/assets/img/users-and-permissions/user-perms/view-selected-documents.png deleted file mode 100755 index bc2ce785..00000000 Binary files a/foundation/www/docs/assets/img/users-and-permissions/user-perms/view-selected-documents.png and /dev/null differ diff --git a/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/role-based-permissions.md b/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/role-based-permissions.md index a8f42a7a..a152f322 100755 --- a/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/role-based-permissions.md +++ b/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/role-based-permissions.md @@ -24,12 +24,10 @@ Permissions are applied on a combination of: * **Document Stages:** Permissions are applied on each stage of the document like on Creation, Saving, Submission, Cancellation and Amendment. A role can be permitted to Print, Email, Import or Export data, access Reports, or define User Permissions. - * **Apply User Permissions:** This switch decides whether User Permissions should be applied for the role on selected Document Stages. - - If enabled, a user with that role will be able to access only specific Documents for that Document Type. Such specific Document access is defined in the list of User Permissions. Additionally, User Permissions defined for other Document Types also get applied if they are related to the current Document Type through Link Fields. + * **User Permissions:** There is a concept of user permission using which a user can be restricted to access only specific Documents for that Document Type. Such specific Document access is defined in the list of User Permissions. Additionally, User Permissions defined for other Document Types also get applied if they are related to the current Document Type through Link Fields. To set, User Permissions go to: - > Setup > Permissions > [User Permissions Manager](/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.html) + > Setup > Permissions > [User Permissions](/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.html) --- @@ -47,7 +45,7 @@ Leave Application is a good **example** that encompasses all areas of Permission Giving Read, Write and Create Permissions to Employee for Leave Application 1. **An Employee should only be able to access his/her Leave Application.** - Hence, Apply User Permissions should be enabled for Employee Role, and a User Permission record should be created for each User Employee combination. (This effort is reduced for Employee Document Type, by programmatically creating User Permission records.) + Hence, User Permissions record should be created for each User Employee combination. Limiting access to Leave Applications for a user with Employee Role via User Permissions Manager @@ -57,7 +55,7 @@ Leave Application is a good **example** that encompasses all areas of Permission Giving Submit and Cancel permissions to HR Manager for Leave Applications. 'Apply User Permissions' is unchecked to give full access. 2. **Leave Approver should be able to see and update Leave Applications applicable to him/her.** - Leave Approver is given Read and Write access at Level 0, with Apply User Permissions enabled. Relevant Employee Documents should be enlisted in the User Permissions of Leave Approvers. (This effort is reduced for Leave Approvers mentioned in Employee Documents, by programmatically creating User Permission records.) + Leave Approver is given Read and Write access at Level 0. Relevant Employee Documents should be enlisted in the User Permissions of Leave Approvers. (This effort is reduced for Leave Approvers mentioned in Employee Documents, by programmatically creating User Permission records.) Giving Read, Write and Submit permissions to Leave Approver for Leave Applications.'Apply User Permissions' is checked to limit access based on Employee. diff --git a/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.md b/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.md index 11ca4065..e6330ba1 100755 --- a/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.md +++ b/foundation/www/docs/user/manual/en/setting-up/users-and-permissions/user-permissions.md @@ -4,7 +4,7 @@ Along with Role based permissions, you can also set user level permissions that are based on rules that are evaluated against the data contained in the document being accessed. This is particularly useful when you want to restrict based on: 1. Allow user to access data belonging to one Company -1. Allow user to access data related to a specific Customer or Territory +2. Allow user to access data related to a specific Customer or Territory ### Creating User Permissions @@ -13,11 +13,21 @@ To create a User Permission, go to Setup > Permission > User Permissions When you create a new record you will have to specify 1. The user for which the rule has to be applied -1. The type of document which will be allowed (for example "Company") -1. The specific item that you want to allow (the name of the "Company) +2. The type of document which will be allowed (for example "Company") +3. The specific item that you want to allow (the name of the "Company) Creating a new user permission +### Advanced control + +You can optionally apply user permission only for specific Document Type by setting the Document Type in the Applicable For field under Advanced Control. +Setting **Applicable For** option will make the current user permission applicable only under the selected Document Type master. + +Creating a new user permission +In the above User Permission, user michael.corleone@gadgets.com will be able to access blog posts created by blogger Michael Corleone. + +**Note:** If **Applicable For** is not set, User Permission will applicable across all related Document Types. + ### Ignoring User Permissions on Certain Fields Another way of allowing documents to be seen that have been restricted by User Permissions is to check "Ignore User Permissions" on a particular field by going to **Customize Form**