|
|
For each of the eight categories in the array, you can enter a numeric
value between 1 and 5, or reference an Access When rule. Access is denied
when the Access Control value is greater than or equal to the production
level of this system. When an Access When rule is used, the system
evaluates the rule and denies access when the result of the Access When
rule is True.
If a field contains 0 or is blank, access is permitted (not denied).
Users may need the first five types of access to operate on instances. The last three types are usually needed only by application developers.
The production level of the system is set in the
prconfig.xml file and is visible on the System
form.
Field |
Description |
| Access Controls | R-10247 |
| Open Instances |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule. This determines whether holders of the access role identified as the first key part of this rule can open existing instances of the class identified in the second key part of this Access Deny rule. |
| Modify Instances |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule. This determines whether holders of the access role identified as the first key part of this rule can save new or modified instances of the class identified as the second key part of this rule. Save, not modify true? |
| Delete Instances |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule. This determines whether holders of the access role identified as the first key part of this rule can delete instances of the class identified as the second key part of this rule. |
| Search Instances |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule. This determines whether holders of the access role identified as the first key part of this rule can search through instances of the class identified as the second key part of this rule. Informally, this is known as "read-only" access. |
| Execute Activities |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule. This determines whether holders of the access role identified as the first key part of this rule can execute activities that belong to the class identified as the second key part of this rule. |
| Open Rules |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.
This determines whether holders of the access role identified as the first key part of this rule can open rules with the class as a key part. |
| Modify Rules |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.
This determines whether holders of the access role can save new or modified rules with the class as a key part. |
| Delete Rules |
Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5. If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.
This determines whether holders of the access role can delete rules with the class as a key part. |
Access Deny form
As a best practice, create the Access When rule in the
Rule- base class. That is, set the Applies To
key part of the Access When rule to 
About Access Deny
rules