Recording Level Resolution

In the database that I design, I implemented object-level protection based on the profile.

Each user can view, edit, insert, update database tables in accordance with the profiles (roles) in which he is a member.

Now you need to implement “External Users”, which can only view the relevant records and edit some of them (but not the main part of the database).

I am working on a recording model.

Are there any ideas on how to restrict users belonging to the External Users profile to view and work with some records of each table, but not all.

+3
source share
3 answers

, VIEW, , .

+3

VIEW, .

VIEW - - , .

+3

. :

/ / / .

" ".

  • can choose from units (organizational units-companies-departments, etc.)
  • can select the parameters assigned to it
  • can SELECT tasks assigned to him
  • cannot select other projects and tasks

The administrator can create the "External partner" user group and assign some projects and products (with problems) for this

Members of this group can select assigned objects.

This is a difficult solution, but the only thing that solves the problem of my clients (they do not want external partners to have access to their entire database of projects).

0
source

Source: https://habr.com/ru/post/1698509/


All Articles