Form rights

Access rights > Form rights

Access rights must be assigned to forms, to be able to use them. A form can have a specific set of access rights for each role in an application. The types of rights may vary, depending on the kind of form:

Application forms rights

When a form is created, access rights are granted, by default, only to the ADMIN role. Even if this form is added to the navigation menu or to other forms (as a link), it will not be displayed, until proper rights are explicitly given to it to roles.

To assign rights to application forms, open the Form rights form, located in the Rights area under Administration on the navigation menu. Filter Form type as User, and the role(s) you wish to grant rights to, and tick the View checkbox, then click Save after changes are made.

The View right is enough to display the form, but be aware that actions like update, insert and delete will mainly depend on the record rights the role has, as well as the action icons available in the section configure in Form designer.

Note that multiple selection can be done, manually or by clicking on the checkbox at the left corner of this form. Use the Edit selected button to grant rights at the same time.

To set rights on the Record filter, available in application forms, filter the Filter form.

It is possible to configure the access rights on a form to be more restrictive than those granted to records or fields. For instance, a form may not allow a role to edit the values of fields, even if the role has suitable Update rights on these fields. In actual applications, this feature is often used to create forms meant to be used only for inspecting records, together with other forms to allow also their editing.

System forms rights

Not only the administrator of an application is entitled to have and use system forms (i.e., administrative forms). There can also be users having a limited number of system forms visible in their menu. To assign access rights to system forms for other users could be useful in special situations, e.g., a regular user who is entitled to run a report, but cannot create one; or a user who assists the administrator with import of data, but cannot delete the existing templates. This is why IS Tools describes the following form rights, providing a recommendation on how they should be used.

In a new application, full rights for ADMIN are granted by default to all system forms, while the USER role has View and Delete own personal reports in the Report queue form.

Report forms rights

Open the Form rights form, located in the Rights folder under Administration on the navigation menu. Filter the report form(s) and the role(s) you wish to grant rights to. Tick the proper checkboxes and click the Save button.

Note that the report forms are provided with some of the regular access rights for application forms (View, Update, etc). Additionally, they have special rights, related to settings on each form. Display them with the NDMEfilter at the left hand of the form.

As a recommendation, the rights in blue below should be granted to roles of ordinary users, while roles of key users (e.g. a manager of a department in the company) could be granted the rights in pink, plus the blue ones. The ADMIN role has all the rights, by default.

Report forms

Rights

View

Update

Insert

Delete

Other special rights

Report wizard

□

□

□

Create public, Enables the Shared report option in the Report information window of the wizard.

Create role based/scheduled, Includes the Type of report window in the wizard.

Allow all roles, If unticked, only the current user’s roles can be added for a role based report, in the Type of report window of this form.

Report manager

□

View all, i.e., view other’s reports.

Report and import queue

□

□

View all i.e., view other’s reports and imports.

Report batch pop-up

*

Hide record groups, If ticked, the Record group filter is not shown in this popup.

Allow file export, If ticked, the File export option is available in the Format box of this form.

Report info

□

Report macro files

□

□

□

□

Report groups

□

□

□

□

Import forms rights

Open the Form rights form, located in the Rights folder under Administration on the navigation menu. Filter the form(s) and the role(s) you wish to grant rights to. Tick the proper check-boxes and click the Save button.

Note that the import forms are provided with some of the regular access rights for application forms (View, Update, etc), plus an additional right for the Import configuration form. Display it with the NDMEfilter at the left hand of the form.

As a recommendation, access rights on import forms should not be granted to ordinary user’s roles (except for the right in blue below), in order to avoid risking the integrity of the data. However, roles of key users (e.g. a sub-administrator) could be granted the rights in pink below. The ADMIN role has all the rights, by default.

Import configuration: View, Update, Insert, Delete, See rule triggers (to see rules triggered by a specific field)

Prepare import run: View, Allow include rule statistics in log (to enable the Include rule statistics in log setting in this form)

Report and import queue: View, View all, Delete.

Other system forms rights

The Menu configuration form includes the Online admin manual right to display an icon at the top of the navigation menu that opens our help documentation.

The External tables form includes the View right, which must be granted to the user who will configure the connection to the remote application. For more information, read the External tables manual or contact the IS Tools support team.

The Filter form, which controls the Record filter, has the following rights: View public filters, Manage public filters (this one implies creation, edition and deletion) and Allow advanced filters.

The User setting forms has rights to allow/deny end users to edit their theme, password and languange, among others.

The Theme designer has right to View, which implies the Save as well.

Any other system form, related to user administration, access rights, rules and administrative forms in general, should not be granted to other role rather than the ADMIN role.

Online users will be able to see granted forms immediately after refreshing their menu.