[Change access rights] process item
Use the [Change access rights] process item to add or delete users' access rights to records in the system objects during the process execution.
Fig. 146 Using the [Change access rights] process item
For example, you can grant access to an activity or customer registered during the process execution.
Parameters
Permissions parameters are specified in the card (Fig. 147) that opens when the item is added to a process. You can also open this card by double-clicking the corresponding process item.
Fig. 147 [Change access rights] item parameter card
[Caption] – Enter the caption of the process item that will be displayed in the diagram. By default, the “Change access rights” caption is used.
[Object] – select the object that contains the needed record. For example, to change permissions to activities, select the “Activity” object. Use the filter area to define the list of records whose permissions will be changed.
Delete access rights
The list contains access rights that will be deleted when performing an action. Access rights can be deleted for a certain role or certain user, as well as for several users using the filter.
Add access rights
The list contains access rights that are created when performing the item. Access rights can be created for a certain role or user, as well as for several employees selected using the filter.
Delete access rights card
To add and edit records in the [Delete access rights] list, use a card (Fig. 148).
Fig. 148 Delete access rights card
Operations
[Read], [Edit], [Delete] – Select the checkbox for those operations access rights to which must be deleted.
Delete access rights
Use the radio button to select users or roles whose access rights must be deleted:
[For all roles and users] – Delete access rights to the selected operations for all users and roles.
[For roles] – Delete access rights for the selected organization structure item.
[For employee] – Delete access rights for the selected user.
[For the employees who meet the filter conditions] – Delete access rights for all users that correspond to the filter conditions.
Create access rights card
To add and edit records in the [Add access rights] list, use a card (Fig. 149).
Fig. 149 Create permissions card
Operations
[Read], [Edit], [Delete] – Select the checkbox for those operations access rights to which must be created.
Access level
Use the radio button to select the operation access level that will be set when performing an action:
[Granted] – Users will obtain permission to execute selected operations.
[Granted with delegation rights] – Users will obtain permission to execute operations and to grant this permission operations to other users.
[Denied] – Executing operations will be denied for users. The option button is available if the [Use denying access rights to records] checkbox is selected for the selected object.
Add access rights
Use the option button to select users or roles for which permissions should be created:
[For roles] – Create permissions for the selected organization structure item.
[For employee] – Create permissions for the selected user.
[For the employees who meet the filter conditions] – Create access rights for all users that meet the filter conditions.