Skip to main content

Hello community,

 

I have setup a couple of restriction groups in the Row Level Security space, lets call one Group A and the other Group B. They both use group type A (direct). I have assigned User A to Group A and User B to Group B.

In Group A, I have selected ALL of the available Item Classes and added them to it.

In Group B I have selected a specific item in the Inventory Items tab. No Item Classes were selected.

 

When I look at the Stock Items page, User A can see all the items as expected. However, when i look at the Stock Items pages as User B I do NOT see the Inventory Item I selected. Why is that?

Hello,

Are Group A and Group B the only active restriction groups?

I think User B cannot see stock items because all stock items are linked to Item Classes that are assigned only to User A.

 

Laura


Hello,

Are Group A and Group B the only active restriction groups?

I think User B cannot see stock items because all stock items are linked to Item Classes that are assigned only to User A.

 

Laura

 

But I have User B assigned to a specific Inventory Item through Group B. Shouldn’t User B, be able to see the one inventory item but nothing else? Or does the Item Class selection override the Inventory Item selection?


When you restrict the employee from seeing an Inventory Class, they can’t see the Stock Items that are in the restricted Inventory Class. (We aren’t hiding just the Item Class screen with Item Class Restriction Groups.  We are hiding all items that are in the Item Class, because it’s less work to hide the whole class versus hiding individual Stock Items.)

 

Please try: Add the Employee B to Group A:  now Employee B can see all Item Classes and one Stock Item.  In Stock items screen, I expect they will actually only see the one item that is in Group B because (after being added to Group A); the one item is the cross-section of Group A and Group B where Employee B is a member.

 

Then update this post with your results.  Also, let us know your goal so we can recommend the proper restrictions for you.

Best regards,

Laura


When you restrict the employee from seeing an Inventory Class, they can’t see the Stock Items that are in the restricted Inventory Class. (We aren’t hiding just the Item Class screen with Item Class Restriction Groups.  We are hiding all items that are in the Item Class, because it’s less work to hide the whole class versus hiding individual Stock Items.)

 

Please try: Add the Employee B to Group A:  now Employee B can see all Item Classes and one Stock Item.  In Stock items screen, I expect they will actually only see the one item that is in Group B because (after being added to Group A); the one item is the cross-section of Group A and Group B where Employee B is a member.

 

Then update this post with your results.  Also, let us know your goal so we can recommend the proper restrictions for you.

Best regards,

Laura

 

Ah interesting. I thought if an Item Class was selected that you would be able to see all of the items with that class regardless of whether you selected an Inventory Item. Almost like you were doubling up on the permissions and just telling the system you can see that item a second time.

Now you made me aware on how it actually works I can proceed.

Thanks Laura!

My goal is just to understand how these row restrictions work so I can setup an external client we have able to access a small area of our ERP. This was one of the last things I had to figure out which is great! Now I don’t have to develop a whole frontend to make this happen

Thanks again!


Woo hoo! Glad to help.


Reply