2.0/Process PermissionsinShare

Jump to: navigation, search

Contents

 [hide]

1 Assigning Process Permissions 2 Viewing the Objects: Dynaforms, Input and Output Documents

o 2.1 Dynaforms Permissions 2.1.1 Change Log 2.1.2 Preview

o 2.2 Input Documents Permission 2.2.1 VIEW Permission

2.2.1.1 Downloading Uploaded Documents 2.2.2 BLOCK Permission 2.2.3 DELETE Permission

o 2.3 Output Documents Permission 2.3.1 VIEW Permission - Viewing Output Documents

2.3.1.1 Downloading Generated Documents 2.3.2 DELETE Permission

o 2.4 Case Notes Permissiono 2.5 Message History Permission

3 Example: Creating a Process Applying Process Permissionso 3.1 Defining Process Permissionso 3.2 Running a Case

Process Permissions are designed to give users or groups read-only access to cases and their objects (DynaForms, Input Documents and Output Documents). By default, only the currently designated user to work on a case can open the case. To allow other users the ability to see (but not change) the data in cases, they need to be assigned Process Permissions to the process and its objects. Process Permissions are designed to offer advanced control over how users access cases and what information they can view at specified tasks during the case.

Note: If needing to give users write access to cases, see Process Supervisor.

Assigning Process Permissions

To assign Process Permissions to user(s) or group(s), go to DESIGNER menu and open a process. Then, right click on a blank area of its process map and select the Process Permissions option from the dropdown menu.

A list of Process Permissions will appear for the current process. To create a new Process Permission, click on the New link at the top of the list.

A dialog box will appear to define the properties for the new Process Permission:

Define the following properties:

Case Status: Select the status which the case must currently have in order to allow the user/group to access it. The options are:

o All: Give user/group access to the case no matter which status it has. o DRAFT: Only when the case has "DRAFT" status, meaning that the case's

current task has started to be worked on (a step has been opened and saved), but the current task hasn't yet been completed.

o TO_DO: Only when the case has "TO_DO" status, meaning that the case's current task has been assigned to a user, but that task hasn't started to be worked on yet (i.e., no steps have been saved yet).

o PAUSED: Only when the case has been paused. o COMPLETED: Only when when the case has "COMPLETED" status, meaning

that the case finished by arriving at an End of Process routing rule and wasn't closed by canceling or deleting the case.

Target Task: Select the task where the case must currently be in the process in order to access the case. If the case is currently in any other tasks, then the selected user/group will not be able to open the case. To give access no matter what is the current task, then select the All Tasks option.

Group or User: Select the user or group who will be given access to cases from the current process.

Origin Task: Select the task whose objects will be seen by the selected user/group. The user/group will only be able to see objects from this task. To allow the user/group to see objects from all tasks, choose the All Tasks option.

Participation Required?: Select Yes if the user must have been previously designated to work on the case at some prior point in order to have Process Permissions to access the case. Select No if the user doesn't need to have been designated to work on the case in

order to open it. Note that selecting Yes means that the user will only have Process Permissions to open the case after he/she has worked on the case, and not through the whole process.

Type: Select the types of objects that the user/group will be given access to see: Dynaforms, Input Documents, Output Documents or ALL.

DynaForm/Input Document/Output Document: If choosing a specific Type, then this dropdown box will appear to select which objects the user/group can access from the Origin Task. Select the specific DynaForm, Input Document, or Output Document or select ALL to give the user/group access to all the objects of that type from the Origin Task.

Permission: Select one of the two options: o VIEW: This option allows the user/group to open the case and view its object(s). o BLOCK: This option prevents the user/group from opening the case and viewing

its objects. o DELETE: This option is listed when an Input or Output Document is chosen

from the above list. This permission prevents the user/group from deleting either the Output or Input Document.

Note: Multiple Process Permissions can be used in combinations when needing to block a small subset of users or block access to a small subset of objects. First, create a general permission with the VIEW option. Then, create more specific permissions which BLOCK access to that smaller subset. See the examples below.

When done defining the new Process Permission, click on Create to add it to the list of existing Permissions.

Viewing the Objects: Dynaforms, Input and Output Documents

Once permissions are given, user assigned with those needs to have access to those objects. so go to HOME and the options where user can have access to that objects are:

Inbox

Draft

Participated

Search

Dynaforms Permissions

By going to HOME > Inbox > Information a list of all options will display, click on Dynaforms and the list of all dynaforms set on users permissions will display:

By choosing one dynaform from the list, two options will be selected Change Log and Preview

Change Log

It shows all changes made by any user who has been assigned with Process Permissions to have access to dynaforms which belongs to the current case.

Note: From version 2.0.42 any modifications made by Supervisor Users will be reflected on the change log.

Change log will specify:

Field Name: Name of the field which was modified. Usually the name which is displayed is the name given when the field was created.

Previous Values: If some previous changes were made those values will display on this field.

Current Values: It will display all the fields and their values modified.

By choosing a dynaform from the list and click on 'Change Log the information to show will be

Preview

By selecting a dynaform, the preview of what was filled during the case will be displayed on view mode:

Input Documents Permission

VIEW Permission

By giving the permission to View an Input Document, this will be available for its downloading.

Once this permission is set, go to HOME > Inbox > Information a list of options will display, click on Uploaded Documents and the list of all Input Documents set on users permissions will display:

Where:

Filename: Name of the uploaded document.

Comments: comments added when the document was uploaded.

Type: file type in this case it will be always INPUT type.

Version: If different versions of the document was uploaded here will display the version number of the current uploaded document.

Origin Task: task on which the document was uploaded.

Created by: user who uploaded the document.

Create Date: date when the document was uploaded.

Downloading Uploaded Documents

One of the advantages if the user has permissions to see input documents is the possibility to download them. On the upper side of the available input documents there is the option to download them.

Select the input to download and then click on Download option:

A pop up window will display where the document can be saved on a local computer.

BLOCK Permission

By giving the permission to Block, the input document can't be seen for the user who was set with this permission:

If the user who is set with this permission go to HOME > Inbox > Information > Uploaded Documents and try to see the input document uploaded it won't be able to be seen as this was set with Block permission:

DELETE Permission

Note: Until version 2.0.44 this permission doesn't work properly; however, from version 2.0.45 the logic of this permission has been changed. Check the following explanation.

By giving the permission to Delete, the Delete button on the Input Document screen will be enabled to have the possibility to delete the document attached.

Only a a user group or users themselves will have the possibility to delete a document with this permission set. By default this permission is not set so the user can't have the possibility to delete any input document uploaded.

In the image below it is described this permission and how it works:

Output Documents Permission

VIEW Permission - Viewing Output Documents

By going to HOME > Inbox > Information a list of all options will display, click on Generated Documents and the list of all Output Documents set on users permissions will display:

Where:

Title: Name of the uploaded document.

Output Document: comments added when the document was uploaded.

Origin Task: task on which the document was generated.

Created by: user who generate the document.

Create Date: date when the document was generated.

Downloading Generated Documents

Another advantage if user has permissions to see output documents is the possibility to download them no matter the format on which the document was generated (PDF or DOC)

Select the Ouptut Document to download and depending on the format generated click on to download the document on DOC format or click on to download the document on PDF format:

A pop up window will display where the document can be saved on a local computer.

DELETE Permission

Available version: 2.5

Importing Dynaforms !

By giving the permission to Delete, the Delete button on the Output Document screen will be enabled to have the possibility to delete the document generated. If the document was generated on .PDF and .DOC format, both of them will be deleted.

When generating documents while running a case, those will be listed on Information > Generated Documents:

Click on icon to delete the Output Document chosen; only one document can be deleted at the same time. A dialog box will display to confirm if the document will be deleted:

Case Notes Permission

Available version: 2.5

ProcessMaker Tiny MCE Editor Integration

This permission works on an user level allowing them to have a restriction when case notes needs to be added. On previous ProcessMaker versions any user was allowing to add a case note on a particular case, and this was sending as a mail to all participants of the case. But what happen if the user doesn't need to add case notes or doesn't have the corresponding permission?.. server will be full of unnecessary notes difficult to maintain or delete for an admin user, or a considerable amount of mails will be sent. Because of that, it will be required, if an user needs to post a case note, add a process permission only to add case notes on specific processes.

By default, users won't have this permission set, so if they want to add a case note the following message will be displayed:

To give users the respective permission to add case notes, open Process Permission, on Type option select Case Notes:

Message History Permission

Available version: 2.5.1

Through ProcessMaker versions, users who had participation in a case had the option to see not only a preview of messages sent, even the privates ones, but also to resend messages to any user allowing them to know possible confidential information of a Company. Now resending emails functionality has been restricted per user.

By default, users don't have the permission to resend messages, if you want to add a permission for users to resend them open Process Permission and on Type select Message History:

A user or a group of user, depending on how the permission was set, will have access to resend messages and have a preview of them.

Type of permissions are:

View: Users will have only the permission to view the message sent, inside Message history, options will be:

Block: Users won't have any notification listed inside Message History

Resend: Users will have only resend permission available:

Let's use Credit Card Application process to clarify this permission. We have Application and Verification tasks, as the image below:

A notification will be sent between this two tasks, this message contains the credit card application, so the only people who should have access is the supervisor of the user who initiated the case, users assigned to the tasks do not have to see this notification and not mention to resend it.

Permission setting for user assigned to Application task, will be:

Participation Required is set as No since the supervisor is not assigned to any task to have a participation on the case.

Once case is executed and the notification is sent, the supervisor got to Advance Search and look for the case number where the notification needs to be resend, open the case and go to Information > Message History and the notification sent will be listed as follows:

To resend the notification click on the option:

To have a preview of the notification sent click on the option.

A user who doesn't have this permission set (resend and preview a message) the following restrictions will display:

Example: Creating a Process Applying Process Permissions

Defining Process Permissions

Create a process setting the following conditions,

user1 is assigned to tasks 1 and 5. user2 is assigned to task 2, user3 is assigned to task 3 user4 is assigned to task 4.

Then possible specific process permissions are:

1. user1 has permission to [VIEW] [ALL] process objects, no matter what task user1 is participating in [target task = ALL TASKS]. The only condition is that user1 must have already participated in the process [participation=YES].

The permission will be:

It is also possible to block access to certain objects. For example user1 already has permission to view all objects. This permission can be restricted by defining the following specific process permission:

2. user1 has no permission to view [BLOCK] the dynaform -- > Dynaform_Task2 of Task 2, no matter what task user1 is participating in [target task = ALL TASKS].

Then with the permission defined in Task1 and Task2, user1 has permission to [VIEW] all process objects except for the Dynaform_Task2 of Task 2. In this way the access to the different process objects can be customized.

3. user2 has permission to [VIEW] all Input Documents belonging to Task2, only when user2 is participating in Task4.

Note that with these conditions, the participation parameter is not required, therefore it has the value [participation=NO].

4.user3 has permissions to [VIEW] all Output Documents belonging to Task1, only if the status of the case is [COMPLETED] in this case the user doesn't need to participate in the case [participation=NO] .

The created permissions are displayed in the Specific Permission List as shown below:

Running a Case

Run the case and check every process permissions set above.

1. Accomplish permission 1 and 2: user1 can [VIEW] [ALL] process objects with a participation required on the case, but it can't see Dynaform_Task2 of Task 2:

Run the case until Task4 and log in with user1, go to HOME>Participated, it can be seen that it has (1) case, so in the list the case will be listed, for the example the Case # will be 32

Open the case the information of the case will display so go to Information>Dynaforms

And the list of all Dynaforms filled will display, in this case only one Dynaform is displayed because user has permission to see only this dynaform since Dynaform_Task2 is blocked:

As the permission was set to see all objects, and as one Input Document until now was uploaded, go to Information > Uploaded Documents:

The list of Uploaded Documents will display, in this case only one was generated:

Moreover, an Output Document was generated so go to Information>Output Documents:

The list of Generated Documents will display, in this case only one was generated:

2. Accomplish permission 3, by login in with user2, this user has to have access to the Input Document uploaded during the process by going to Information>Uploaded Documents.

3. Accomplish permission 4: user3 has permissions to [VIEW] all Output Documents belonging to Task1, only if the status of the case is [COMPLETED] and the user participation is not required. So once the case is completed log in with user3 and go to HOME>Participated look for the number of the case, for this example 32 open it and go to Information>Generated Documents and the Output document generated during the case will be listed.

Page Discussion View source History

Log in

Navigation

Main page Recent changes Random page Help

Versions

2.x 1.x

ProcessMaker Editions

Enterprise Edition SugarCRM Edition

Search

  Toolbox

What links here Related changes Upload file Special pages Printable version Permanent link

In other languages

Português Español

Share This

Share on facebook Share on twitter Share on email Share on linkedin

This page was last modified on 16 October 2013, at 08:51. This page has been accessed 12,933 times. Privacy policy About ProcessMaker Disclaimers