Question

How to Lock down Edits to other users records

  • 4 January 2022
  • 1 reply
  • 82 views

Userlevel 5
Badge +6

Within Apps9, can you please provide direction on the best way to lock down edits to the customer record or transactions (Bus Opportunity, Sales Quote, Customer Order, Shop Order, Customer Invoices) by our Sales Team, so they can edit only their own, and any direct reports.  If they don’t have direct reports, they cannot edit any transaction or customer unless their name is listed as the Salesman.  

 

Or can this be locked down by the Main Representative? 

 

Example:  Only Jane Smith can edit Jane Smiths Sales Quote.  She can view everyone’s, but can only edit her own.  

 


This topic has been closed for comments

1 reply

Userlevel 7
Badge +28

We are APPs 9 UD 13.

We have a custom field on the header for Order Responsible Person.  Only this user ID is allowed to make certain changes to the order, reschedule, etc. 

Then there is a custom event to validate the allowed change against the user to check that the user making the change is the current Order Responsible Person.

It is possible for the field to be changed to the current user, then make a change, and switch the field back.  But the extra steps force someone to think about it first.  We also have history logging on the field in the case we find someone doing more than they should be so we can trace it out.

Your requirement is a little bit more detailed in that you also want a hierarchy to be allowed to also make the change.  In this case, you would need a custom table that contains both the manager and the direct reports and the event would need to validate either the manager or the direct report.

This doesn’t affect the view of anyone from a permission standpoint, nor does it prevent changes that aren’t validated (customer contact, email, etc) that might be made by central order entry.  But it does restrict critical changes that might affect the outcome of or cause order delays.

You could build this off of the Salesman or the Main Representative or both, but you would need to build the logic to track the relationship between them and which fields you want to restrict based on which order status. (In Planned, we don’t restrict anything for example)