Business Objects Access Rights
Access rights are a way to restrict access to a particular Business Object. Access rights work in combination with role permissions to allow for a fine-grained two-dimensional permission system.
Access rights are always set per Business Model. Configuring access to objects of one model has no effect on access to objects of a different model.
Default Access
You can set default access for Business Objects of a given Model by going to Business Models > Model Designer > Default User Access
. If you set default access, you don't need to set access on each individual Business Object. However, if you do set access on a Business Object, it overwrites (replaces) the default access settings.
Disabling Access Control
You can disable access control for a given Business Model altogether. Go to Account > Configuration > Business Objects > Access Control Disabled
and select the respective Business Model.
If access control is disabled for a Business Model, all users can access all Business Objects in that collection and edit them according to their role permissions.
Role Permissions & Access Rights
The relationship between role permissions and access rights can be thought of as two axis in a two-dimensional permission system.
An access right defines IF a user can access an object. If so, the role permissions define WHAT a user can do with this object (create, read, delete).
Example 1: Admins
Admins always have access to all objects with all permissions.
Create | Read | Delete | |
---|---|---|---|
Object 1 | ✅ | ✅ | ✅ |
Object 2 | ✅ | ✅ | ✅ |
Object 3 | ✅ | ✅ | ✅ |
Example 2
Permission: Read objects. Access rights: Object 1, Object 3.
Create | Read | Delete | |
---|---|---|---|
Object 1 | ⛔ | ✅ | ⛔ |
Object 2 | ⛔ | ⛔ | ⛔ |
Object 3 | ⛔ | ✅ | ⛔ |
Example 3
Permissions: Read objects, delete objects. Access right: Object 2.
Create | Read | Delete | |
---|---|---|---|
Object 1 | ⛔ | ⛔ | ⛔ |
Object 2 | ⛔ | ✅ | ✅ |
Object 3 | ⛔ | ⛔ | ⛔ |
Example 4
Permission: Read objects. Access control disabled.
Create | Read | Delete | |
---|---|---|---|
Object 1 | ⛔ | ✅ | ⛔ |
Object 2 | ⛔ | ✅ | ⛔ |
Object 3 | ⛔ | ✅ | ⛔ |
Example 5
Permission: Read objects. Access control enabled but no access to any objects (neither on object level, nor via default access).
Create | Read | Delete | |
---|---|---|---|
Object 1 | ⛔ | ⛔ | ⛔ |
Object 2 | ⛔ | ⛔ | ⛔ |
Object 3 | ⛔ | ⛔ | ⛔ |
See Business Objects