Solved

Why ADMIN role can be overridden by other role?

  • 9 December 2021
  • 6 replies
  • 97 views
JuniSihombing
Rank
Userlevel 4
Badge +11

Hi.

we experienced that ADMIN role can be overridden by other role which is

 

Exaample:

person 007 has roles ADMIN and DISPATCHER.

Role DISPATCHER has setup like this:

 

Having that setup for DISPATCHER role, the ADMIN role is overridden.  Person 007 cannot modify any other person anymore.

 

Does anybody know whether it is a correct behavior that ADMIN role can be overridden by other role which has Admin menu as READ-ONLY?

Can you explain why it is setup like that?

 

Look forward to your feedback.

~Juni

icon

Best answer by Lee Pinchbeck 9 December 2021, 18:16

View original

6 replies

S
Rank
Userlevel 2
Badge +3

The behaviour of roles is that if one of the roles has Admin and another role on the person has Admin with read-only it will select the least restrictive. ADMIN role is not being overridden its the default behaviour of roles.

A solution is to have a Dispatcher role without ADMIN and set this on the required person records.

You can also try with the incremental option on the ADMIN role to see if that resolves the issue.

Lee Pinchbeck
Rank
Userlevel 7
Badge +24

As per the in app help docs for Role it is actually the reverse:

You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.

The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).

Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.

Kind regards,

Lee Pinchbeck

Currently reading: The Way of Kings - Brandon Sanderson
S
Rank
Userlevel 2
Badge +3

As per the in app help docs for Role it is actually the reverse:

You can assign multiple roles to a person. If multiple roles specify different access to the same item, the least restrictive access is used, unless the Incremental option is selected. Then, each line is applied separately.

The behaviour described by @JuniSihombing would suggest that incremental may be set on one or both of the roles (can’t see that field from the screenshot).

Otherwise there is a mistake in the docs that will need to be corrected to match the actual behaviour.

Kind regards,

Lee Pinchbeck

Yes this is how it works. I have written the same 3 minutes ago :)

Lee Pinchbeck
Rank
Userlevel 7
Badge +24

@schuster you put most restrictive. The doc says least restrictive.

 

Currently reading: The Way of Kings - Brandon Sanderson
S
Rank
Userlevel 2
Badge +3

@schuster you put most restrictive. The doc says least restrictive.

 

Yes typo on my part just fixed it. But the solution provided resolves the problem.

JuniSihombing
Rank
Userlevel 4
Badge +11

Hi @schuster, @Lee Pinchbeck,

yes, I check again to the DISPATCHER role.  Indeed it has the “Incremental” flag marked.

 

It’s clear now.  Thanks for your responses.

 

Cheers,

~Juni

Reply


Terms & ConditionsCookie settings