Solved

Field Modification Rights

Posted on 2003-11-25
6
230 Views
Last Modified: 2013-12-18
How does one set a field so that anyone with editor rights can initially edit a field when the doc is created, but than restrict it so only a certain person can modify it.
0
Comment
Question by:schmad01
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:qwaletee
ID: 9817804
Hi schmad01,

Simplest way: set the field to require EDITOR access.  Then make the "higher level" users editors, and the "lower level" users into Authors.  Of course, if these "authors" need to be able to edit any document (just not this field), set up a role in the ACL called [AllCanEdit] then create a computed author field wth formula "[AllCanEdit]"

Now, on creation, all fields -- including the "editor only" field -- can be edited by anyone.  As soon as the doc is saved the first time, any further changes to this field will be limited to editors -- even if someone has authro access to a particular document, authors are locked out of the particular field.

Where this scheme won't work:  if the "higher level" users need to have Autgor-only access, and you can't assign editor.  You can code around that, but it won't truly be the same.

Best regards,
qwaletee
0
 
LVL 31

Expert Comment

by:qwaletee
ID: 9817813
The other way to do this: put the field in a section, with a computed for display section formula, "[RestictedAccess]"

Create that role in the ACL, assign appropriate users.  If you expect thereto be any local replicas, you will need Enforce Consistent ACL.

This is NOT secure, but a convenient way to "direct" who can access the field.
0
 
LVL 24

Expert Comment

by:HemanthaKumar
ID: 9818032
You should not hard code the role into the controlled section.. this will effectively block edit rights on the fields in this section right from the start.

So you have to compute it when it is saved

Create a field called EditAccess, computed with formula
@If( @ISNewDoc; ""; "[EditRole]");

EditRole is a role that is defined in the db acl and assigned to the group or group of user ids.

Now the Controlled section should have formula refering this EditAccess field in the @ Formula tab. Just set the type to Computed and enter

EditAccess

Now whenever you create a doc, this section fields are open for edits.. and when it is saved this is blocked to the role that is defined in the EditAccess field

~Hemanth
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:schmad01
ID: 9818033
Actually, the users have Editor access already so I guess I will have to go with a computed access section and use roles?
0
 
LVL 31

Accepted Solution

by:
qwaletee earned 125 total points
ID: 9818441
I suggest taht if the users already have editor acess, then yo shoudl go with my first suggestion.

Add the role.  Assign it to all users.  Add the author field.  Put the role in the author field.  Demote some users from author to editor.

Now, it looks like there is no change, because if you are in the authors field (via the role), it is the same as if you are an editor.

BUT... once you add the field restriction, authors will be able to create data in teh field on new documents, but as son as the document is saved, no more ability to edit that field for Authors, only for Editors.

It is a neat trick.  And it is completely secure.  The controled access method (my second post, as improved by Hemantha's post) is about the same level f difficulty to implement, and is not secure.
0
 

Author Comment

by:schmad01
ID: 9819652
Great. Thanks.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

For Desktop Techs: How to retain a user's Notes configuration data when swapping out the end user's computer. (Assuming that you are not upgrading to a completely different version of Notes client) All you need to do is: 1) install Notes o…
This is an old article, please see an updated version of this article, located here: http://www.experts-exchange.com/articles/23619/Notes-8-5x-Windows-7-Notes-info-and-tips.html
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now