Authorizations tab in contract management

This document describes how to prevent users from seeing or changing parts of a contract.

Background

Initially, the visibility or changeability of a contract is determined by the role someone has in the working group. By assigning roles and associated authorizations, it is determined what a user can do with regard to a specific contract. For example, a user with the consulter role can often view a contract in its entirety by default but not change anything. In certain situations it is desirable to make exceptions to the standard authorizations for parts of a contract.

Solution

The Contract Management module has the option to enter into a contract per tab to make exceptions to the standard reading and writing rights granted by the working group. With this functionality, a tab may not be visible or its contents cannot be changed by certain users.

Roles and IDs

When setting up the desired tab authorizations, the IDs of the various roles assigned to users are important. The read and write rights are assigned to a role. Below you can see examples of the combination of roles and IDs:

• Contract Manager (ID = 6)

• Contract Owner (ID = 9)

• Consulter (ID = 8)

NB: Check with a Mercell consultant for the IDs of the roles you need to use

when setting up the tab authorizations. The IDs of the roles for your organization may differ from the examples.

Definition template

In order to make specific tabs readable or editable, in addition to the standard assignment of roles, the definition of the template must be adjusted. Two additions are important here:

• restrict=write

• restrict=read

These additions to the definition of a tab within a template improve its visibility. changeability of the tab adjusted. See the next section for two examples.

Examples

Example 1

[tab]

label=Financial

restrict=write;6

restrict=read;9

The contract manager (ID 6) can now see the 'Financial' tab and change its contents. Contract administrators (ID 9) can view the tab, but cannot change it. Users with other roles do not see the tab (and are therefore not allowed to change it).

By default, consultants (ID 8) had a reading function due to their role in the working group. Due to the new definition of the template, they can no longer see the 'Financial' tab.

Example 2 – using the parameter 'all'

[tab]

label=General

restrict=write;6

restrict=read;all

All users may read the contents of the 'General' tab. Only the contract manager (ID 6) may change the contents of the 'General' tab.