Screenshot:Role

Back to Screens_Reference

Role

The aim of a role is to group user/s depending on what parts of Openbravo they are allowed to access to and therefore to work in.

Role

Role window allows to review, create, configure and maintain the roles to use in a given client.

• Client : Client for this installation.
• Organization : Organizational entity within client
• Name : A non-unique identifier for a record/document often used as a search tool.
• User Level : System Client Organization
• Manual : A task or process completed directly by the user, not automatically by the application.
• Advanced : Automatic advanced roles are granted with advanced features
• Description : A space to write additional related information.
• Client Administrator
• Active : A flag indicating whether this record is available for use or de-activated.
• Grant Access : Inserts access to module and window, process, task, workflow and forms.
• Restrict backend access : If checked, this role will not have access to the backend. It will however have access to other applications (such as the WebPOS)
• For Portal Users : If checked, this role will have a simplified (portal) interface, where it only has available the workspace widgets.
• Portal Admin : If checked, the Portal Role will have Portal Administrator privileges
• Is Web Service Enabled : If checked, web services will be able to obtain data for users with this role
• Template : Is Template
• Recalculate Permissions : Recalculate Permissions
• Role : The profile of security for the user defining what windows and tabs they can see.
• Primary Tree Menu : Tree Menu
• Currency : An accepted medium of monetary exchange that may vary across countries.
• Approval Amount : The approval amount limit for this role

Org Access

Org Access tab allows to define the organization/s to which a given role will have access rights to.

• Organization : Organizational entity within client
• Organization Administrator
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role Organization Access
• Role : The profile of security for the user defining what windows and tabs they can see.
• Client : Client for this installation.

User Assignment

User Assignment tab allows to add users to a given role.

• User/Contact : An acquaintance to reach for information related to the business partner.
• Role Administrator
• Active : A flag indicating whether this record is available for use or de-activated.
• User Role
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.

Window Access

This tab lists and/or allows to add the windows to which a role will have access to.

• Window : A work area which can be used to create, view, edit, and process a record.
• Editable Field : An indication that this field may be viewed.
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Window_Access_ID

Tab Access

Defines whether a tab is editable or read only for a concrete role.

• Tab : An indication that a tab is displayed within a window.
• Editable Tab : An indication that this tab can be edited
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Window_Access_ID
• AD_Tab_Access_ID

Field Access

Defines whether a field is editable or read only for a concrete role.

• Field : Any element which can be viewed, edited, or added to a window.
• Editable Field : An indication that this field may be viewed.
• Check On Save : Check On Save
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Tab_Access_ID
• AD_Field_Access_ID

Report and Process Access

This tab lists and/or allows to add the reports and processes to which a role will have access to.

• Process : A series of actions carried out in sequential order.
• Editable Field : An indication that this field may be viewed.
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Process_Access_ID

Form Access

This tab lists and/or allows to add the forms to which a role will have access to.

• Special Form : The name of the form being edited.
• Editable Field : An indication that this field may be viewed.
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Form_Access_ID

Widget Class Access

This tab lists and/or allows to add the widget classes to which a role will have access to.

• Widget Class : Identifies a widget class definition
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Widget Class Access
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.

View Implementation

View implementation tab allows to select customized views.

• View Implementation : Defines the implementation of a view shown in the user interface.
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Obuiapp_View_Role_Access_ID
• Client : Client for this installation.

Process Definition

Grants access to Process Definition. By default, access to process definitions in a window (invoked from a button), is inherited from the permission to the window. To revoke this inherited access and manually decide case by case which are the accessible processes, it is necessary to define a "Secured Process" Preference (at system level or for that specific window) with "Y" as value.

• Process Defintion : Process Defintion
• Inherited From : Inherited From
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Obuiapp_Process_Access_ID
• Editable Field : An indication that this field may be viewed.
• Client : Client for this installation.

Role Inheritance

Allows to define an inheritance for a role. An inheritance is a relationship between two roles: if role A inherits from role B, that means that all the permissions that role B has for different application elements like organizations, windows, reports, processes, widgets etc. will be automatically inherited by role A, allowing it to access those elements in the same way as B. It is also possible to define an inheritance hierarchy, i.e., a role can inherit from different roles, and the priority (order) to inherit the permissions is defined by the sequence number. This means that if two inheritances have accesses in common, the accesses of the inheritance with lower sequence number will be overridden with the accesses of the inheritance with higher sequence number.

• Inherit From : Inherit From
• Sequence Number : The order of records in a specified document.
• Active : A flag indicating whether this record is available for use or de-activated.
• Role : The profile of security for the user defining what windows and tabs they can see.
• Organization : Organizational entity within client
• Client : Client for this installation.
• AD_Role_Inheritance_ID : Role Inheritance

Back to Screens_Reference