Permissions and Access Rights

The Permissions and Access Rights module enables the management of access to individual functionalities (controllers) and document records within the system. Administrators can set permissions for individual users or groups — who can read, edit, create, or delete data within a given module.

Key functionalities:

• Setting specific permissions for each controller individually. Intended primarily for defining module administration permissions.
• Managing access rights to records based on document type, executing unit, and permission level.

Access to module administration

1. Searching for and selecting a controller
   The administrator selects the desired controller. Controllers are grouped into packages, which are shown in the controller list in the Package column. Clicking opens the controller view, where you can use the Edit button on the Permissions tab to set the users or user groups who have access to the controller.

   Tip: to make it easier to find controllers, you can select a package in the Package column to find all the controllers in that package.

   Tip: for each module, you can prepare your own user group for module administration, which you set on the Permissions tab on the selected controllers of the package. This way, you can manage and grant access to module administration to different module administrators.

2. Assigning permissions
   The following operational permissions can be set:

   • Read
   • Write / edit
   • Delete

By granting access to a controller to a selected group or user, you enable access to that module or part of the system.

Access to records

For a selected document type within the modules, you can define users or groups (executing units) who have access to all records of the module. The selected groups or users will automatically be added to the Permissions tab of every record in the selected module.

The procedure for setting up a group with access to all records of a selected document type is as follows:

• Select the document type
• Select the executing unit (e.g., a group or a signing unit)
• Determine the permission level

Note: the settings apply only to new records created after the changes are saved.