Read only access to an entire SITE

Hi JL

Please find some of my notes, and if this helps , then use the same.

1. As indicated by @ShawnBerk, there is no direct possible way, to make one site as read only, while being a user who is allowed transactions in the others.  The same is feasible for Finance Only Users at a company level ( multi company scenario) , but not at Site level.
2. This may be possible in the future versions, where Oracle Row Level data security is being pursued as feature , probably similar to History Logging setup . We know it is being discussed, but not yet a full fledged solution, and is not available currently.
3. You can expand on the event options presented by @ShawnBerk with an additional tweak.

Here are some steps

1. Create a EU ROLE, with complete Read Only rights. ( see the tips below to create one, for full IFS ). Since you have specific components in mind ( like WO, CO, Inventory etc, I recommend using the “Permission sets by Component” tab when creating the permission sets. The naming convention can be ABC_EU_ROLE_Limited_read, where ABC is the site.
2. Connect this role , to the users, to whom you want to give the Read_only access for specific Site 
3. Expand the Event, and limit it to users, to whom this Permission set is connected as follows

----recopied from Shawn text, and added a few additional items -----

BEGIN

IF ( ('&NEW:CONTRACT' = 'ABC')  and (‘&New:User_id’ in (‘select user_id from ifsapp.end_user_role where End_user_role = ‘ABC_EU_ROLE_Limited_read’)) THEN

Error_SYS.Record_General('CustomerOrder', 'CORAMODERR1: This site is read only, changes are not allowed.');

END IF;

END;

PS: Query will need some more cleanup. 

This approach only gives a bit more control over the users, using permission sets, and not by naming each user, in the query.

Refer

How to grant permission sets - for read only. 

1. Create a permission set.
2. Go to details
3. Go to Permission sets by Component
4. Select each component and RMB, and grant Query All - see screenshot.
5. Ensure there is a review on the Database objects, and Activities list, where essential, to ensure error free usage .

Regards

Vivek