Form Permissions

HMickler

There are some users that I would like to give permissions to the Job Ledger Entries, but exclude any payroll related entries. I created a new JLE form that filters these items out. I figure that when they select Job Ledger Entries from the Job Card, I will have it check their permissions are run the appropriate form based on the result.

After reviewing the Permission property information, I began testing limitations set on the Job Ledger Entry form permissions. I set a permission on the form's properties that you had to have Employee Table Data Read permissions in order to run the form. I have yet to be able to see that this setting is having any effect. If the user has read permissions to the Job Ledger Entry table data, they can run the form regardless of whether they have Employee table data Read permissions.

Am I missing a step?

Current Version: 3.01 (Navision Server - not SQL)

kriki

I think it is easier like this:

1) Don't create a new form, because it is possible that the standard JLE-form is run from different locations, so you have to find them all.
2) in the form,put the following code in the OnOpenForm-Trigger:

IF NOT UserMaySeePayrol() THEN BEGIN
FILTERGROUP(6);
SETFILTER("Is A Payrol",FALSE); // or put the filter you need for not seeing the payrolls. The user will not be able to delete this filter if you put it in a different FILTERGROUP than the one you show (=0)
FILTERGROUP(0);
END;

Function "UserMaySeePayrol()":BOOLEAN you have to create.
Eg. create a Role "SEE PAYROL" and add it to the users who may see these. (no need to add permissions to the role)
In the function "UserMaySeePayrol()" you test if the user is a "SUPER" or has "SEE PAYROL" as a role in current company. In one of these case you EXIT(TRUE).
In all other cases : EXIT(FALSE);