The Organizer Object Security module manages permissions at the object level in Organizer. With this module, categories for permission control are created and managed. Each category is seamlessly linked to a specific user role, providing customized control over access to organizer objects such as tasks, calculations, and documents. Users with the appropriate role have access to all objects associated with their category, ensuring that the right information is in the right hands.
System Requirements
Roles
OBJECT_PERMISSION_ADMIN_ROLE - Gives the right to administer object permissions.
OBJECT_PERMISSION_VIEW_ROLE - Gives the right to view object permissions for objects.
Create categories for object permissions
Categories are used for permission control. A category can, for example, correspond to an external contractor or an area.
1.In the menu bar, select Administration > Administrate permission for objects.
2.In the Categories section, press Add.
3.Give the category a name and press OK. An ID is automatically generated using a numbering series.
|
Created categories cannot be deleted. They can only be archived when they are no longer in use, to ensure that no data is lost. |
Assign categories for object permissions to roles
To manage which users have access to which categories, a category is linked to a user role. All users with the specific role have the right to read objects assigned to that specific category.
1.In the menu bar, select Administration > Administrate permission for objects.
2.In the Categories for roles section, press Add.
3.Select the Category and the Role to be linked, and press OK.
|
The Any category option is used to link a role with all categories. This means that the user with the role linked to Any category can see all objects that have any category. |
Associate category with object
1.Right-click on the organizer object to be associated with a category and select Object permission > Set categories.
|
In the dialog box that opens, all selectable categories are displayed on the left. The categories associated with the object are displayed on the right. |
2.Select the category to be associated with the object and press the right arrow. Multiple categories can be selected simultaneously.
3.Press OK to save.
|
•When a category is associated with a task, all objects under the task, such as activities, documents, and calculations, receive the same category as the task. If a different category is desired for a specific object within the task, the category can be set specifically for that object. •If multiple objects are to be associated with the same category, all objects can be selected. By right-clicking and selecting Object permission > Set categories, categories are set for all selected objects simultaneously. If some objects already have categories, these are displayed on the right with the number of selected objects that have the category in square brackets. •When a user creates a new object, the new object is associated with the same category (or categories) assigned to the user. |
Different types of users
There are two types of users for controlling permissions:
•Standard user - The user can see objects associated with a category they have the right to see, as well as objects not associated with any category.
•Strict user - The user can only see objects associated with a category they have the right to see.
To set this up:
1.In the menu bar, select Administration > User manager.
2.In the form to create a new user or edit an existing user, check the Strict category check option to create a strict user as described above.