Problem with section acces and OMIT

[#1]

Hello everybody,

In my application, i want to do security in 2 levels:

     - for object (display or not)

     - for fields (all acces or not access)

The security on the object is ok with my script but the problem is the security for fields.

I want that not all users can see all fiels.

For exemple group RH don't have the right to see MONTANT_COMMANDE

I have this script:

section access;

LOAD * inline

[ACCESS NTNAME GROUPE

ADMIN, ADMIN, *

ADMIN, User1, RH

USER, User2, RH

USER, User3, RH

USER, User4, AFFAIRES];

section application;
star is *;

SET VAR_AFFICHAGE = 0;

LOAD * INLINE

[GROUPE VAR_AFFICHAGE OBJET_ID

TOUS, * ,objet0

RH, 1 ,TX71

RH, 1 ,TX69

AFFAIRES, 1, TX70

AFFAIRES, 1 ,TX68];

LOAD * INLINE
[GROUPE OMIT

RH, AFF_MONTANT_COMMANDE

RH, IND_TEL_PRO_MOBILE];

My 2 fields AFF_MONTANT_COMMANDE and IND_TEL_PRO_MOBILE are defined in the script.

Where is the problem with my OMIT script?

Why when I'm connect with User2 I see the 2 fields in the OMIT.

Have you any idea??

thank you for your help...

[#2]

Thank Vijit for your help...

Should I conclude that there is no possibility of groups with OMIT?

[Miguel_Angel_Baeyens · Accepted solution]

Hi Hélène,

Check the application attached. It's quite simple, but you will get the idea. In the application, there are the following users:

ADMIN will see everything: Sales, Margin and Profit, for USA and ES
USER1 will see everythin but only from USA
USER2 will see only Sales and Profit, not Margin, only from USA
USER3 will see USA and ES, but only Sales, not Margin nor Profit (you need two rows one for each field the user cannot see, and the COUNTRY value is blank meaning all)

Password for each user is the same as user (ADMIN, USER1 and so). From this on, the combinations may be anything, but one value means one row for every user.

Hope that helps.

Miguel

[#4]

Hello Miguel,

thank you for your help...

I thought I could circumvent the problem of a line from field to hide ... but not too bad.
Anyway, thank you for your help and also that of vijit ...

[#5]

Thank you very much Miguel, i've been looking for the solution for a while, you saved a lot of my time .

[jerrydimaso]

Hello,

I realize your problem has been solved, but I had a fair amount of difficulty with OMIT as well regarding one of its limitations. After a few hours I was able to figure it out, and I thought I would post it here as I was unable to find this piece of information anywhere else:

If you are using the OMIT function of section access, you cannot have the "Always One Selected Value" option checked for a List Box that contains whatever field is present in the OMIT column, otherwise the document will fail to load when logging in as that user.

For example, if I OMIT FieldA from UserA, but have a list box containing FieldA with the "Always One Selected Value" box checked in the Properties of that box, then logging in as UserA will yield a failed load of the document.

[mishraamit2485]

Hi Migual,

My problem is i do provide access using NT name.

Please my thread

Row level data reduction as well as hide the entire column