I am trying to make new role as per my company requirement. The role is kind of not clear with me as well, but still I would go ahead with the explanation. Basically I am trying to give access of Sales Orders and Delivery Notes to my production people. Now the catch is that I would want a ROLE of DISPATCH department this role should have the ability to read SO and make a DN but I don’t want them to be able to see the prices involved.
Now I have seen in the doctypes that there is a field named perm level. Now it would be great if someone could explain in detail what these perm level exactly do. Would it be possible for a role to make DN without seeing the prices since prices in a DN are the same as that of a SO.
Please let me know if this kind of a thing is even possible or not.
Let me briefly describe how permission works in the system.
There are two level of permissions: Form level and Field level
Form level permission includes Read, Write, Create, Submit, Cancel and Amend of the form
Field level permission includes only Read and Write(Editable/Non-editable) ability of a particular field.
In ERPNext, permissions are managed by Users, Roles and Perm Level. Roles are assigned to Users and permission of a Role in a particular form/field is tracked against Perm level.
Form-level permissions are managed against "0" perm level. For example, to give "Form Creation" rights to a Role, you have to assign "Create" permission to that Role against "0" perm level.
To manage Field level permission, we assigned a perm level to each and every field. Perm level can be any number (in ERPNext, we generally use 0, 1, 2).
For example, Suppose we have a field "Monthly Salary" in Employee form. You want to give "Read" permission to "Employee" role, "Edit" permission to "HR Manager" role and hide field from "HR User" role.
To implement that we will assign perm level "5" (any higher number) to "Monthly Salary" field through "Setup --> Customize Forms". Then through "Setup --> Permission Manager" we will assign "Read" to "Employee" role against perm level 5, "Read" and "Write" permission to "HR Manager" role against perm level 5. But we do not assign any permission to role "HR User" against perm level 5.
And that's all!
@ Aditya: You can assign a higher perm level to rate and amount field in SO and DN. Then assign "Read and Write" permission to Sales Dept role, but don't assign any permission for Role of DISPATCH department against that perm level. It will make the trick.
On Tue, Mar 27, 2012 at 9:46 AM, Addy <ad...@gmail.com> wrote:
Hi,
I am trying to make new role as per my company requirement. The role is kind of not clear with me as well, but still I would go ahead with the explanation. Basically I am trying to give access of Sales Orders and Delivery Notes to my production people. Now the catch is that I would want a ROLE of DISPATCH department this role should have the ability to read SO and make a DN but I don't want them to be able to see the prices involved.
Now I have seen in the doctypes that there is a field named perm level. Now it would be great if someone could explain in detail what these perm level exactly do. Would it be possible for a role to make DN without seeing the prices since prices in a DN are the same as that of a SO.
Please let me know if this kind of a thing is even possible or not.