Hello!

It is also necessary to update the useIPRestriction parameter to true value in web.config. If you are uisng cloud instance - please approach our support team to update the value.

Apart from that, it is necessary to add the user or the role, that you want to restrict the IP access for, to the operation permission Ignore access check by IP address with NO access level.

Regards,

Dean

Dean Parrett,

Thank you Dean. It was the Web.Config setting. This was not available anywhere in the Academy/Community

Hello!

Unfortunately, there is no basic way to import/export access rights from the system since it is a complicated mechanism and it cannot be extracted from the system easily. You can use custom SQL scripts in the package in order to transfer such information. Below you can find tables that store information about access rights:

1. Sys[SectionName]Rights
2. SysEntitySchemaColumnRight
3. SysEntitySchemaOperationRight

Since it is a complicated task we suggest using the Marketplace application which can ease access rights setup: https://marketplace.creatio.com/app/access-rights-setup-wizard-creatio

Please, let us know in case any further assistance is required. 

Best regards,

Olga. 

Dear Yosef,

There is no option to to set up the rights for lookup values manually. But what you need to do is to enable records permissions for the lookup object and re-distribute the rights for the lookup records among the groups using 1 element process. Just use the Change access rights element to grant and remove the required permissions for particular records.

Here is the example of how the lookup would look like under admin and under regular employees

https://prnt.sc/pg6ksh https://prnt.sc/pg6kuv

Regards,

Dean 

Dean Parrett,

Thank you for you reply.

I tried using the access permission block in my business process but no luck. Could you give an example of how you filtered yours?

In the meantime I added some JS to the AccountPageV2 and was able to filter the lookup but only  when it's a list. ( https://community.creatio.com/questions/filter-lookup-role )

How would you recommend filtering a popup lookup?

Kind regards,

Yosef

Hi Yosef,

What I did is enabled the records permissions for contact type object

Next I removed all rights from the lookup records to make sure they are not visible for everyone accept for administrators

And the last step - I granted the access to 1 lookup record to my CC Agent user

As the result, only 1 record is visible for him

As for coded solution, I guess you need to define the content type of the lookup where you applied the filtration. 

The pop up content type value is 5 and drop down is 3

Regards,

Dean

Dear Jordy,

If we are talking about the record permissions, then the users will not be able to see/edit/delete records if the role is deleted.

For example, I have a default Finance organizational role. The users who belong to it can see the contacts. If I delete Finance role, the correspondent role records from SysContactRight table will be also removed and as the result my users will not be able to see the contacts.

I'd suggest to create the new role firs, assign it to these users, update the records permissions after assigning the required rights and only then remove the old organizational role. It will prevent the users from loosing the ability to see/edit/delete the records.

Apart from that, you can test such actions on the website copy prior making any changes in the production environment.  

Regards,

Dean

Hello Ramnath,

Could you please provide us with screenshots of the business process elements settings for further assistance on this matter?

Thank you in advance! Looking forward to your reply. 

Olga. 

Olga Avis,

Here are the screenshots of elements:-

1. Trigger element - record added

2. Read portal user name (Field name - Borrower)

3. The access rights added

The Role is the name of borrower which was read in 2nd Read Borrower element.

This process is in my local dev environment. I have also created the same process on a trial cloud environment. But the process does not seem to work. 

Is there anything I am missing?

Hello,

It is necessary to grant the rights not to User role but for the Employee  where you should indicate the value of the Borrower field http://prntscr.com/stoezu .  It should be something like this [#Read Borrower.First item of resulting collection.Borrower#]

As for now you try to grant the rights to some role and the system cannot identify it.

Best regards,

Dean

Dean Parrett,

I assigned the access role in process for employee. And the process works now.

But why can't we do for User role.

Even if it works with employee role. The borrower is not an employee. He/She is an end user who will fill the form. Why does it have to be assigned in Employee role.

Can you please elaborate?

Thanks

Ramnath

Hello,

The thing is that your process doesn't read the user role. It would be necessary to find the user's role first using additional read data elements and based on which role is found by, use it in Role parameter instead of Employee.

Regards,

Dean 

Hi Kavian,

theres something in the market palce we have used and works fine:

https://marketplace.creatio.com/app/opportunity-printables-filtering-ro…

rgds,

Luis

Luis Tinoco Azevedo,

Thanks, I will check it out

Hello,

You can simply activate records permissions for "Printable" object and specify read access rights for printables created by system administrators for each printable record separately. Once you activate records rights for printables you will get SysModuleReportRight table created in the database where you need to modify access rights for printables.

Best regards,

Oscar

Oscar Dylan,

Hi Oscar, is this valid for all objects? Can the same logic be applied to processes for example?

Cheers,

Luis

Luis Tinoco Azevedo,

Hello Luis,

As for business processes, we do not recommend changing access rights that are set by default in "Object permissions" section since processes are supposed to be accessed by all system users meaning that all system users can launch processes based on processes start signals. You can use "Operations permissions" section so to manage access level to business processes execution or management (operation permissions with "

CanManageProcessDesign", "CanRunBusinessProcesses" codes) or modify start signals of processes so to prevent processes execution for records that are not supposed to trigger processes.

Best regards,

Oscar

Oscar Dylan,

Hi Oscar,

When you say "modify access rights for printables" do you mean directly via sql or through another way?

Thanks,

Raz

Luis Tinoco Azevedo,

Hi, 

I see it is only for opportunities, is there something else for orders?

Oscar Dylan,

Hi, 

what do you mean when you say "modify access rights for printables", Can you give more details?

Thanks