Security Permissions

Revision as of 02:07, 25 January 2012

Security Groups

Subscribe-HR comes with 5 Security Groups already defined to get you started. These Security Settings are:

1. System Administrator
2. Developers
3. Employee Self-Service
4. Line-Manager Self-Service
5. Directors and Executive Management

Please note that if there are multiple Security Groups assigned to a User, they will be able to Flick between these groups using a Function, located on the top left of the user interface.
Please also see Multiple Security Groups Assigned to a User:
http://www.subscribe-hr.com.au/wiki/Adding-users/#Multiple_Security_Groups_Assigned_to_a_User

If you cannot see the Maintenance TAB or the Groups menu item you may not have the correct permissions to perform Security Group changes.

Locating and Editing Security Groups

1. After logging into Subscribe-HR, select the Maintenance TAB.
2. Select the 'Groups' Folder.
3. You should see a list of Group Names. These are the existing Security Groups.
4. Select the 'Edit Permissions' hyperlink adjacent to Security Group you wish to modify.
   
5. You should see a Core Modules column and an Allow Access column.
6. A tick in the Allow Access column adjacent to a Core Module means that this Security Group has access to these features in the system.
7. Select one of the Core Modules.
   
8. You will see a table with the folders down the page and allowable permissions across the page.
   
9. If you wish to change the access on an entire folder simply check or remove the check in the appropriate column adjacent to the folder.
   
   Example: Removing a check from the Delete column adjacent to the Employee folder will cause any user that has this Security Group singularly assigned to not be able to delete Employee's.
   
   If you wish to change the access at a page level, (allow or remove access to someone Viewing or Editing a field) select the folder and this will drill you down to the next level.
   
10. If you are making modifications to the Folder level ensure you select the 'Save' button before drilling to a deeper level.

What Security Groups are assigned to a particular user

1. Select the Maintenance TAB.
2. Select the Users Folder.
3. Select the user.
4. Locate the Security Group options box, any checks in this options box mean that this user has the selected Security Group assigned to them.

Security Groups Explained

All users are assigned to one or more Security Groups. Security Groups define the users permissions within the system (this is what data the user can see and what functions and access the user has over changing the data).
User permissions can be set for Create, Update, Delete, Archive, Import, Export and View.

In the below example we can see that if this Security Group is assigned to the user then the user would be able to
Create, Update, Delete and View the Employee Record and Employee Training Records, However will ONLY be able to View Employee Medical information.

Multiple Security Groups Assigned to a User

When multiple Security Groups are assigned to a user the security permissions of each Security Group are merged together.
If you can imagine 2x Overhead Projector sheets, One sheet with 3x ticks on it and the second sheet with 2x ticks on it,
When you place these two sheets together you end up with 5x ticks visible.

Example: Security Group A as above allows for the user to be able to
Create, Update, Delete and View the Employee Record and Employee Training Records, and ONLY be able to View Employee Medical information.

If we now assign Security Group B to the same user, and Security Group B allows the user to Create, Update and Delete the Employee Medical information,
We suddenly have an effect of the user being able to Create, Update, Delete and View the Employee Record and Employee Training Records, and Employee Medical information.

Group Filtering

Group Filtering can be set-up to allow specific users to interact with areas of the system according to specific filters, which interact with their overall Security Group. For example, You can set-up a Filter that applies to an an Interview Panel which has been assigned to a Vacancy. So that any of the Interview Panel, can view the Applicants for that Particular Vacancy.

1. Select the "Groups" Folder in "Maintenance"
2. Select a Specific Group
3. Select the "Filtering" Sub Folder
4. Click "Create"
5. Mark "Active" as "Yes"
6. Select the "Object" that the Filter Applies to. In the Example above this will be the "Vacancies" Object
7. Click "Save"
8. Then you will have access to the "Conditions" that can be set-up
9. Select "Condition" "Default Interview Panel (Vacancies)" - "Equals To" - "Logged In User".
10. Click "Save"