Multiple Access Levels Per User

[deleted]

I have read many posts on access levels, some helpful, others not so much. Everyone has different ways of doing things.

From what I can deduce I can create a security BO that deals the assigning multiple access levels to a user and check against these when the user hits different areas of the site or specific records. In my industry the roles and tasks individuals take on are a web of misery for someone who needs to secure multiple areas and even individual records. I am sure I am not alone.... Is my deduction correct?

I have just started the trial and have not yet looked at security until the light bulb moment of understanding of AIM..... As far as security goes creating 'access levels' of 'Manager, Director, Technician, Accountant' or ' Estimating, Accounting, Invoicing, Purchase Orders, Communications' or ' Level 1, Level 2, Level 3, Level 4' just wont cut it. Just to much crossover of duties for an individual.

Am I over thinking this? Probably, definitely.

Thanks James

tford

Hi James,

Welcome to AwareIM. Does not sound like you are over thinking it .. sounds like you are thinking through your business requirements very thoroughly.

One of the strengths of AwareIM is that is you know and document your business requirements, configuring AwareIM has a LOT of flexibility for a configurator to solve those requirements.

mfauzi

I am having the same issue where each user need to assume multiple role. From reading the user guide, it seems that user table only allow for single access level per user.

I really appreciate if anybody can show the right path on how to address this requirements.

RentProperty

Dear James & Mfauzi

We also had a similar need (Maybe Not as Comprehensive yet) but here is what we did.

For each user we set-up a couple of flags...i.e. ViewAccounts, ViewMaintenance, ViewInspections, AllowBilling, AllowManagementAccess etc.

Then all you do is Have a Manager view/Form for the user where you can setup their profile and Tick the flags you want to tick for each user. Once this is done you can View/Hide Menus, tabs, operations, etc entirely based on whether the LoggedInUser."Flag" is Yes or No. Worked Like a Charm for us and is much easier to do than having 10 different access levels. 🙂

Hope this helps.

Kind Regards

Hein

mfauzi

RentProperty,
Thanks for for suggestion, we will investigate whether it will meet our requirements or no.

But how is the default access level field set to. Do you set it to Administrator or am I missing something...

pbrad

Hi,
With AwareIM you will find that there are always options in how you handle things. As far as Access Levels are concerned you might want to consider leaving your access levels fairly open and securing access to specific forms, processes, queries, attributes etc... by other means such as conditionally visible operation buttons, menu items etc.

As far as I am concerned, not being able to ever get anywhere near a particular query for example is just as robust as not allowing them to see the query if they do access it.

Using conditional visibility of objects is a viable way of securing an application. You can also easily create multiple visual perspectives that provide menu access to specific areas of your application yet share a common access level and you can switch between these perspectives programatically.

Anyway, I imagine some security purist will disagree with me here but I challenge anyone to access an object that is not exposed to them on the front end.

Cheers,
Pete

lineamovil

Hello Pete,

Wonder if you have a sample willing to share, Im trying to figure the best way on doing it.

best regards,