Fine-Grained Permission Control for Template Content

Version

Function Description

Fine-grained permission control for template content includes four aspects:

1. Cell visibility and new cell value setting

2. Widget visibility and availability

3. Row/Column hiding in reports

4. Sheet visibility in reports

Example in this document:

The template Template Content Permission Control is mounted to the directory on the decision-making platform, and the sales department is granted the permission to view the template.

Users with the Sales Leader position in the department can view the template’s full content.

While users with the Sales position in the department have access to the template, they cannot:

1. View the Amount Payable and Paid or Not fields.

2. View or use the data entry widgets.

3. View the Submit and Data Validation buttons on the toolbar.

4. View the Order Details sheet.

Template Preparation

Click to download the prepared template: Template Content Permission Control - Initial.cpt

The document does not detail the template creation steps, as they are not the focus. The following figure shows the final template style.

Template Web Attribute Setting

Note: 

To ensure that other templates are not affected by this template’s permission settings, configure the permissions specifically for this template.

Open the downloaded template, choose Template > Web Attribute > Data Entry Setting, and set Following Settings to Set for This Template Separately. This ensures that role-specific permission configurations apply only to the current template.

Permission Editing

Choose Template > Enter Permission Edit to enter the permission editing page, as shown in the following figure.

A dashed box will appear around the main body of the report, and a role list will be displayed on the role panel in the lower-left corner, as shown in the following figure.

Note: 

The role list includes not only roles, but also departments and positions configured on the decision-making platform.

Cell Permission Configuration

Since cell content is visible by default, no additional permissions are required for the sales leader of the sales department. You only need to restrict the salespeople in the department from viewing relevant cells.

Select Sales departmentSales, select cells C8-F8, click the icon to enter the Permission Edit panel, deselect Cell Visible, and click Save, as shown in the following figure.

Note: 

1. To remove the cell permissions, you can right-click the cells and select Clear Permission.

2. Alternatively, you can select an entire row/column and tick Hide in Permission Edit.

Widget Permission Configuration

Since widgets are visible and available by default, no additional permissions are required for the sales leader of the sales department. You only need to restrict the salespeople in the department from viewing relevant widgets.

Select Sales departmentSales, select cells B4, D4, F4, B6, D6, and F6, click the icon to enter the Permission Edit panel, deselect Visible, and click Save, as shown in the following figure.

Note: 

1. The method for setting the visibility of widgets on the parameter panel is the same as that for data entry widgets, and thus will not be detailed.

2. If widgets are set to be invisible and cells visible, cell content will not be displayed for widgets that are initialized immediately after report loading, including the radio button group widget, checkbox widget, and checkbox group widget.

For details about widgets that are initialized immediately after loading, see Widget Introduction.

Toolbar Permission Configuration

Since the toolbar is visible by default, no additional permissions for the sales leader of the sales department are required. You only need to restrict the salespeople in the department from viewing certain toolbar content.

Select Sales departmentSales, select Data Entry Page from the dropdown box, select the Submit and Data Validation buttons, click the icon to enter the Permission Edit panel, deselect Visible, and click Save, as shown in the following figure.

Note: 

1. Since the report is previewed in the Data Entry Preview mode, you need to select Data Entry Page from the dropdown box. You can select a preview mode as needed.

2. You can hold down Shift to select multiple buttons.

Sheet Permission Configuration

Since the two sheets are visible by default, no additional permissions are required for the sales leader of the sales department. You only need to restrict the salespeople in the department from viewing certain sheets.

Select Sales departmentSales, select the Order Details sheet, click the icon to enter the Permission Edit panel, deselect sheet Visible, and click Save, as shown in the following figure.

Permission Editing Save and Exiting

Click to enter the Configured Role panel, and select Sales departmentSales. Content configured in the previous sections appear grayed out, indicating that the users assigned the selected role do not have the permission to view or use the content.

Click Save to apply the permission configuration. Click the icon in the upper-right corner of the dashed box to exit permission editing, as shown in the following figure.

Template Mounting to the Platform Directory

Log in to the decision-making platform as the admin, choose System Management > Directory Management > Directory Management, and click Add Template.

Select Template Content Permission Control, and click Next. Set Type to Data Entry and Terminal to PC, and click OK, as shown in the following figure.

Template Viewing Permission Configuration

Log in to the decision-making platform as the admin and choose System Management > Permission Management > Common Permission Configuration.

Select the permission holder from Dept./Role/User List. In this example, select Sales department from Dept., and assign the View permission on Template Content Permission Control, as shown in the following figure.

Effect Preview

After Lisa (username/password: Lisa/12345), leader of the sales department, logs in to the decision-making platform and selects Template Content Permission Control, Lisa can view the full content of the template, as shown in the following figure.

After Sun Lin (username/password: sunlin/123456), a salesperson in the sales department, logs in to the decision-making platform, Sun Lin cannot:

1. View the Amount Payable and Paid or Not fields.

2. View or use the data entry widgets.

3. View the Submit and Data Validation buttons on the toolbar.

4. View the Order Details sheet.

The following figure shows the effect.

For details, you can click to download the finished template: Template Content Permission Control.cpt

Problem

You have configured the Submit button to be invisible for a specific role in a data entry template, which affects the Submit button visibility in other templates for the same role.

Cause

Following Settings has been set to Use Server Settings under Web Attribute > Data Entry Setting in the data entry template.

On the permission editing page, the changes you made affect the server toolbar permissions, which applied to all data entry templates using the server settings, as shown in the following figure. 

Therefore, the Submit button in all data entry templates using the server settings became invisible for that specific role.

Solution

You can refer to the "Template Web Attribute Setting" section and set Following Settings to Use Server Settings under Web Attribute > Data Entry Setting.