Skip to main content
Solved

Why ADMIN role can be overridden by other role?

  • December 9, 2021
  • 6 replies
  • 105 views

JuniSihombing
Hero (Customer)
Forum|alt.badge.img+11

Hi.

we experienced that ADMIN role can be overridden by other role which is

 

Exaample:

person 007 has roles ADMIN and DISPATCHER.

Role DISPATCHER has setup like this:

 

Having that setup for DISPATCHER role, the ADMIN role is overridden.  Person 007 cannot modify any other person anymore.

 

Does anybody know whether it is a correct behavior that ADMIN role can be overridden by other role which has Admin menu as READ-ONLY?

Can you explain why it is setup like that?

 

Look forward to your feedback.

~Juni

Best answer by Lee Pinchbeck

As per the in app help docs for Role it is actually the reverse:

You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.

The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).

Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.

Kind regards,

Lee Pinchbeck

View original
Did this topic help you find an answer to your question?

6 replies

Forum|alt.badge.img+3
  • Do Gooder (Employee)
  • 20 replies
  • December 9, 2021

The behaviour of roles is that if one of the roles has Admin and another role on the person has Admin with read-only it will select the least restrictive. ADMIN role is not being overridden its the default behaviour of roles.

A solution is to have a Dispatcher role without ADMIN and set this on the required person records.

You can also try with the incremental option on the ADMIN role to see if that resolves the issue.


Lee Pinchbeck
Ultimate Hero
Forum|alt.badge.img+24
  • Ultimate Hero
  • 1219 replies
  • Answer
  • December 9, 2021

As per the in app help docs for Role it is actually the reverse:

You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.

The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).

Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.

Kind regards,

Lee Pinchbeck


Forum|alt.badge.img+3
  • Do Gooder (Employee)
  • 20 replies
  • December 9, 2021
Lee Pinchbeck wrote:

As per the in app help docs for Role it is actually the reverse:

You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.

The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).

Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.

Kind regards,

Lee Pinchbeck

Yes this is how it works. I have written the same 3 minutes ago :)


Lee Pinchbeck
Ultimate Hero
Forum|alt.badge.img+24
  • Ultimate Hero
  • 1219 replies
  • December 9, 2021

@schuster you put most restrictive. The doc says least restrictive.

 


Forum|alt.badge.img+3
  • Do Gooder (Employee)
  • 20 replies
  • December 9, 2021
Lee Pinchbeck wrote:

@schuster you put most restrictive. The doc says least restrictive.

 

Yes typo on my part just fixed it. But the solution provided resolves the problem.


JuniSihombing
Hero (Customer)
Forum|alt.badge.img+11
  • Author
  • Hero (Customer)
  • 130 replies
  • December 10, 2021

Hi @schuster, @Lee Pinchbeck,

yes, I check again to the DISPATCHER role.  Indeed it has the “Incremental” flag marked.

 

It’s clear now.  Thanks for your responses.

 

Cheers,

~Juni


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings