we experienced that ADMIN role can be overridden by other role which is
Exaample:
person 007 has roles ADMIN and DISPATCHER.
Role DISPATCHER has setup like this:
Having that setup for DISPATCHER role, the ADMIN role is overridden. Person 007 cannot modify any other person anymore.
Does anybody know whether it is a correct behavior that ADMIN role can be overridden by other role which has Admin menu as READ-ONLY?
Can you explain why it is setup like that?
Look forward to your feedback.
~Juni
Best answer by Lee Pinchbeck
As per the in app help docs for Role it is actually the reverse:
You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.
The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).
Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.
The behaviour of roles is that if one of the roles has Admin and another role on the person has Admin with read-only it will select the least restrictive. ADMIN role is not being overridden its the default behaviour of roles.
A solution is to have a Dispatcher role without ADMIN and set this on the required person records.
You can also try with the incremental option on the ADMIN role to see if that resolves the issue.
As per the in app help docs for Role it is actually the reverse:
You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.
The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).
Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.
As per the in app help docs for Role it is actually the reverse:
You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.
The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).
Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.
Kind regards,
Lee Pinchbeck
Yes this is how it works. I have written the same 3 minutes ago :)
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.