Form rights
Access rights > Form rights
Access rights must be assigned to forms, to be able to use them. A form can have a specific set of access rights for each role in an application. The types of rights may vary, depending on the kind of form:
-
You may filter and sort the Form rights to ease the assignment of rights.
Multi-level sorting: You can sort more than one column, keeping a specific order, e.g. sort by column "A", then by column "B", and so on.
For that, after sorting the first column, hit and hold Shift on your keyboard, and then click on the second column you wish to sort (one click for ascending, two clicks for descending), and then the third column, etc.
Note that the order will be indicated by a number together with the sorting arrow icon.
Application forms rights
When a form is created, access rights are granted, by default, only to the ADMIN role. Even if this form is added to the navigation menu or to other forms (as a link), it will not be displayed, until proper rights are explicitly given to it to roles.
To assign rights to application forms, open the Form rights form, located in the Rights area under Administration on the navigation menu. Filter Form type as User, and the role(s) you wish to grant rights to, and tick the View checkbox, then click Save after changes are made.
|
The View right is enough to display the form, but be aware that actions like update, insert and delete will mainly depend on the record rights the role has, as well as the action icons available in the section configure in Form designer. |
|
Note that multiple selection can be done, manually or by clicking on the checkbox at the left corner of this form. Use the Edit selected button to grant rights at the same time. |
|
To set rights on the Record filter, available in application forms, filter the Filter form. |
|
It is possible to configure the access rights on a form to be more restrictive than those granted to records or fields. For instance, a form may not allow a role to edit the values of fields, even if the role has suitable Update rights on these fields. In actual applications, this feature is often used to create forms meant to be used only for inspecting records, together with other forms to allow also their editing. |
System forms rights
Not only the administrator of an application is entitled to have and use system forms (i.e., administrative forms). There can also be users having a limited number of system forms visible in their menu. To assign access rights to system forms for other users could be useful in special situations, e.g., a regular user who is entitled to run a report, but cannot create one; or a user who assists the administrator with import of data, but cannot delete the existing templates. This is why IS Tools describes the following form rights, providing a recommendation on how they should be used.
|
In a new application, full rights for ADMIN are granted by default to all system forms, while the USER role has View and Delete own personal reports in the Report queue form. |
Report forms rights
Open the Form rights form, located in the Rights folder under Administration on the navigation menu. Filter the report form(s) and the role(s) you wish to grant rights to. Tick the proper checkboxes and click the Save button.
Note that the report forms are provided with some of the regular access rights for application forms (View, Update, etc). Additionally, they have special rights, related to settings on each form. Display them with the 
at the left hand of the form.
|
As a recommendation, the rights in blue below should be granted to roles of ordinary users, while roles of key users (e.g. a manager of a department in the company) could be granted the rights in pink, plus the blue ones. The ADMIN role has all the rights, by default. |
Report forms |
Rights |
||||
|---|---|---|---|---|---|
View |
Update |
Insert |
Delete |
Other special rights |
|
□ |
□ |
□ |
Create public, Enables the Shared report option in the Report information window of the wizard. Create role based/scheduled, Includes the Type of report window in the wizard. Allow all roles, If unticked, only the current user’s roles can be added for a role based report, in the Type of report window of this form. |
||
□ |
View all, i.e., view other’s reports. |
||||
□ |
□ |
View all i.e., view other’s reports and imports. |
|||
* Hide record groups, If ticked, the Record group filter is not shown in this popup. Allow file export, If ticked, the File export option is available in the Format box of this form. |
|||||
Report info |
□ |
||||
□ |
□ |
□ |
□ |
||
□ |
□ |
□ |
□ |
||
Import forms rights
Open the Form rights form, located in the Rights folder under Administration on the navigation menu. Filter the form(s) and the role(s) you wish to grant rights to. Tick the proper check-boxes and click the Save button.
Note that the import forms are provided with some of the regular access rights for application forms (View, Update, etc), plus an additional right for the Import configuration form. Display it with the at the left hand of the form.
|
As a recommendation, access rights on import forms should not be granted to ordinary user’s roles (except for the right in blue below), in order to avoid risking the integrity of the data. However, roles of key users (e.g. a sub-administrator) could be granted the rights in pink below. The ADMIN role has all the rights, by default. |
Import configuration: View, Update, Insert, Delete, See rule triggers (to see rules triggered by a specific field)
Prepare import run: View, Allow include rule statistics in log (to enable the Include rule statistics in log setting in this form)
Report and import queue: View, View all, Delete.
Other system forms rights
The Menu configuration form includes the Online admin manual right to display an icon at the top of the navigation menu that opens our help documentation.
The External tables form includes the View right, which must be granted to the user who will configure the connection to the remote application. For more information, read the External tables manual or contact the IS Tools support team.
The Filter form, which controls the Record filter, has the following rights: View public filters, Manage public filters (this one implies creation, edition and deletion) and Allow advanced filters.
The User setting forms has rights to allow/deny end users to edit their theme, password and languange, among others.
The Theme designer has right to View, which implies the Save as well.
|
Any other system form, related to user administration, access rights, rules and administrative forms in general, should not be granted to other role rather than the ADMIN role. |
|
Online users will be able to see granted forms immediately after refreshing their menu. |