Field-level and button-level security

Field- and button-level security enables administrators to assign permissions to fields and buttons within the application.

Security is assigned on a group basis as defined by the Security Groups section. Each security group may be assigned one permission:

  • View: Enables members of the security group to view the element.
  • Act: Enables members of the security group to manipulate the element. For buttons, the act permission allows the user to press the button. For fields, users are allowed to edit the field.
  • Deny: Prevents members of the security group to access the element. The field or button will not be visible.

One field or button can contain multiple groups that are assigned different permissions.

You assign permissions to fields and buttons in configuration mode. In configuration mode, a small key or lock icon is displayed next to each element that can be secured.

If security attributes have been assigned to the field or button per the current user’s role, then a small lock icon is displayed. However, if security attributes have not been assigned, a small key icon is displayed.

Note: In general, sensitive data should not be put into viewable fields. If you cannot avoid this, you can configure a PasswordUI Field UI type to protect the data. See Localization of field input types for more information on how to do this.