Some explanations about different types of Permissions:
- Operations – what functions a user can do e.g. View a raw Material, Add a New Formulation
- Formulations – what item classes a user can view, modify or add, plus what compositions a user can view, view, add e.g. a User may be able to View a Formulation class (=header type information and properties) but not View a Composition (cannot see the ingredients of the recipe). If a user is not permitted to see Compositions, they can on an individual item basis, be given view or modify composition permission in the ‘Security’ tab of the formulation.
- Raw Materials - what item classes a user can view, modify or add, plus what compositions a user can view, view, add
- Entity Properties – permission to access to key pieces of data, e.g. price, customers, composition
- Events – subscribe to changes in status of Job (this is an early feature that has not kept pace with system expansion, and is overtaken by new features)
- Projects – permission to add, modify, view Projects based on Project Template. So, users at different sites could only access projects relevant to them.
Permissions on Roles and Permissions on Users
A User can have individual permissions, assigned to them, but can also belong to ‘Roles’ from which they inherit permissions. Roles are a convenient way of managing permissions so that groups of permissions can be assigned to similar Users, and that basic groups of permissions can be assigned to all users. A User can belong to multiple Roles
How to Control access to specific raw materials and formulations
To control access to specific classes of item you could use ‘Roles’ as a way of grouping permissions to give to multiple users at the same site. For example a new Role could be added ‘X Division User’ and could have permissions on Formulations and permissions on Raw Materials which are appropriate for them, and then different permissions for Role ‘Y Division User’. The all Users in X Division can belong to Role ‘X Division User’ etc, and also have system function permissions set based on Permissions on Operations.
For individual control on formulations you can set Permissions on Formulations so user cannot view or modify an item class. Then assign permission on individual item, use Modify a Formulation go to Security tab, then give user permission to View formulation or Modify formulation.