Role Security for Users
ResRent users can switch Roles within the ResRent application without the need
to log out and back in as a different user, similar to how the users can switch Locations. This feature gives to users the ability to switch
User Group to determine how system displays the
menu and how the screens are presented (Screen Designer settings) without the need to log in
as a different user or manipulating security settings back and forth.
The following important points must be noted:
- Pre-existing User Group value on the Locations tab of User screen continues
to be used to determine:
- Permissions (different from Menus and Screen Designer settings. See Permissions tab of User Group screen).
- Settings on the User Group screen itself. For example, Unrestricted Reservation Booking check box and so on.
- Pre-existing Role Setup screen continues to be used for the
steppingstone to import users into ResRent from
external systems like Infor Ming.le™. But Role Setup can also be used
operationally as well for this new switch ability. Note that it has a pre-existing
User Group field.
- A default * Role record is added as part of upgrade, which has ‘R5’ as a User Group value.
- In Locations tab of User
screen, the Role column is required and part of
the key.
- Users can now associate a Location to a user multiple times, if the Role value defined for each is different.
- At upgrade, system ensures that pre-existing data in Locations tab of User screen gets a logical Role value assigned based on available Role Setup data in the tenant.
- The Session Location link in upper right corner of screen is allows the user to change Role and/or Location value, and not just the Location value.
- At login/run-time, Session Role functionality
is implemented in addition to Session
Location:
- System uses the user’s Session Role and Session Location to determine which Locations tab record’s Role value must be used. System then finds that Role Setup record’s User Group value (in Roles Setup screen) which is used to render the menus and screen layouts (screen designer settings). If the user’s Session Role is just the * Role, system does not use the ‘R5’ User Group value on it. Instead, system uses the User Group value on the Record View tab of the User screen to render the menus and screen layouts. One exception for screen designer settings is that any label changes made in screen designer (fields, buttons, links, section titles) affect ALL user groups in the system.
- System continues to use the User Group value on the Locations tab for Permissions and to determine User Group screen settings in Record View tab. However, the system now uses Session Role and Session Location values to determine which Locations tab record’s User Group value must be used, instead of just Session Location.
- Default Role field on the User screen’s Record View tab is optional. The purpose of the Default Role field is to assist with defaulting a Role value into the Locations tab when a record is added , to ease data entry efforts. Default Role field is not used operationally but only for data setup purpose. The main purpose of the Default User Group field on the Record View tab of the User ID screen is also just to assist with data entry of Locations tab records.