Managing Permissions

Permissions are a combination of the events that can be performed and the resources upon which they can be used. Events include activities such as Create, Copy, Change, Extend, Change Log, User Interface etc. All Roles have a default set of Permissions associated with them. These Permissions govern the users ability to conduct certain actions in MDO such as Meta Data configurations, Workflow configurations, etc.  

MDO enables permissions to be setup at three different levels. 

1. Security Permissions

Security permissions define the access of various events against each role. Events are the actions that can be performed by the end-user such as creating a customer record or deleting a customer record.  

For example: An ‘Leave Officer’ can have access to Create/Change/Delete while a ‘Manager’ can only Approve/Reject a request. In this case, the ‘Leave Officer’ will have the Create, Change & Delete events assigned to their role while ‘Manager’ will have Approve & Reject permissions.

There are approximately seventy-five events in MDO which can be assigned to roles to give permission to perform different actions. 

Below are the steps to set up permissions in MDO: 

  1. Click on the Settings icon at the top right corner on the Home page. 
  2. Click on Modules from the left menu bar > Select the module for which role permissions need to be setup.  
  3. Click on the Security tab > Search for the role.  
  4. Select ‘+’ to expand the role. The complete list of events available will appear.  
  5. Click on Assign next to the event permissions to be assigned for the role.  
  6. The Assign button changes from Assign to Un-Assign confirming the permission setup for that role. 

Below is the list of events along with their description and event ID: 

EVENTID  DESCRIPTION 
1  Create 
2  Save And Complete 
3  Deletion 
4  Change 
5  Approve 
6  Save And Draft 
7  Reject 
8  Change Log 
9  View Summary 
10  Extend 
11  Copy 
12  List View Edit 
13  User Interface 
14  Duplicacy Check 
15  Number Settings 
16  List View 
17  Mass Upload 
18  Mass Extend 
19  Mass Change 
21  Workflow Log 
22  Integration Logs 
23  Sync 
24  Sync Log 
26  Print PDF 
28  Validation 
29  Delete 
30  Org Hierarchy 
31  Summary 
32  Reset 
33  LOC ASSGN 
34  Dynamic Pages 
35  User Registration URL 
36  Edit & Reprocess 
37  Save and Add 
38  Save and Copy 
39  Comments 
40  Attachment 
41  Print 
42  Link URL 
43  Activate 
44  DeActivate 
45  Form Validation 
46  Save and Mail 
47  Email 
48  Create Reference Object 
49  Save and Print 
52  Add Attribute Values 
53  Upload Image 
54  Reprocess 
55  Hierarchy View 
56  Save Print and Add 
57  Delete Attachment 
58  Report View 
59  Status Reprocess 
60  Applet Print 
61  Reports Admin 
65  Mass Dump 
66  ReSubmit 
67  Deletion Log 
68  Quick View 
69  Quick Edit 
70  Quick Create 
71  Run Schema 
72  Excel Connect 
73  Schema Log 
74  Load Sheet 
75  Audit Trail 

2. Layout Permissions

Layout permissions define the access to forms against various events corresponding to each role. Below are the steps to assign events to different roles in the layout.

  1. Navigate to Settings > Modules and select the module for which the permissions need to be assigned to the layout.   
  2. Click on the Layouts tab. 
  3. Click on Edit in front of the Layout name to assign the permissions. 
  4. Layout view will appear. Click on Submit. 
  5. The Assign Roles and Events box will appear. Search for the role. 
  6. Check the event(s) which need to be assigned to that role. This will define what actions that role can perform in this layout/form. 

Note: Permissions for the layout can be assigned to multiple roles simultaneously. 

Below is the list of events/ permissions that can be assigned to a layout.

Event ID  Event name 
1  Change 
4  Approve 
5  Copy 
10  Extend 
11  Copy 
31  Summary 
36  Edit & Reprocess 
43  Activate 
44  DeActivate 
68  Quick View 
69  Quick Edit 
70  Quick Create 
72  Excel Connect 

3. Permission Profile 

Permission profile can be set up to assign different permissions to different roles. The permission profile can be used to set profiles based on data inputs and previously saved records.  

e.g. A permission profile can be setup for a plant manager to view/create/change data of only particular plants that are assigned to him.  

In order to set up a permission profile, follow these steps: 

  1. Navigate to Settings > Modules and select the relevant module  
  2. Click on the Business Rules > Permission Profile tab. 
  3. Click on Add New. 
  4. Select the permission field and click on Save. 
  5. Expand the row to create permission values. 
  6. Select parent field values and click on Save.