The [Object permissions] section
The [Object permissions] section (Fig. 1) is designed to manage access to the system sections and lookups, including the access to objects, their columns and records.
Record administration in most bpm’online sections is disabled by default, so all users have full rights to administer such section records. Before you start working with bpm’online, set up user access to sections and records in accordance with your business needs.
Fig. 1 The [Object permissions] section
Records in the [Object permissions] section can be edited directly in the list without using a page.
List views
[Sections] – the list of objects for which the checkbox is selected in the [Section] column.
[Lookups] – the list of objects for which the checkbox is selected in the [Lookup] column. These objects contain the data structure of the lookups.
[Managed by records] – the list of objects for which the checkbox is selected in the [Managed by records] column. You can manage access rights to individual records of these objects.
[Managed by columns] – the list of objects for which the checkbox is selected in the [Managed by columns] column. You can manage access rights to individual columns in these objects.
[Managed by operations] – the list of objects for which the checkbox is selected in the [Managed by operations] column. You can manage access rights to perform the view, add, edit and delete operations in these objects.
List columns
[Lookup] – the checkbox in this column indicates that the object is used to create lookups. Examples of lookup objects can be “City”, “Currency”, “Job responsibility”, etc.
[Section] – the checkbox in this column is selected for objects that contain data structure of sections. For example, the “Contact”, “Account” and “Activity” objects are sections.
[Managed by records] – select the checkbox in this column to enable setting up access rights to separate records in the object. If the checkbox is cleared, then the access to individual records in that object will not be limited.
Attention!
If the checkbox has been selected for the object that already contains records, then these records will become unavailable for all users. Only users who have permission to perform the [Select any data] system operation will be able to read that data.
You can set denying access rights to records only if the [Use denying access rights to records] checkbox is selected in the properties of the object. Otherwise, there will be no possibility to do it.
Note
If the [Managed by records] checkbox is selected for certain objects, the access to a new record is granted to its author and the user specified in the [Owner] column for the new record.
[Managed by columns] – select the checkbox in this column to configure access rights to individual columns in the object. If the [Managed by columns] checkbox is cleared, then the access to individual columns in the object will not be limited.
Note
You can configure access rights to columns by using the [Columns permissions] detail.
[Managed by operations] – select the checkbox in this column to limit the general permissions to read, add, edit and delete records of the object.
Note
You can configure operations permissions by using the [Access to object] detail.
Contents
•The [Default permissions] detail of the [Object permissions] section
•The [Access to object] detail of the [Object permissions] section
•The [Columns permissions] detail of the [Object permissions] section.
Video tutorials
