How to disable Action buttons (Pay, Void) on AR301000 for a Read-Only role?

Hi ​@Ariyair 

The standard security configuration won’t fully handle this. AR301000 and SO302000 are workflow-driven, and the workflow reapplies the action visibility and enabled state for each status at runtime, which overrides the access rights settings.

Could you please try the sample below once?

public class ARInvoiceEntry_Ext : PXGraphExtension<ARInvoiceEntry>
{
    public static bool IsActive() => true;

    private bool? _readOnly;
    private bool IsReadOnlyRole =>
        _readOnly ??= PXAccess.GetRoles()
            .Contains("Fact Viewer", StringComparer.OrdinalIgnoreCase);

    protected virtual void _(Events.RowSelected<ARInvoice> e, PXRowSelected baseHandler)
    {
        baseHandler?.Invoke(e.Cache, e.Args);   // workflow runs first
        if (e.Row == null || !IsReadOnlyRole) return;

        Base.release.SetVisible(false);
        Base.voidCheck.SetVisible(false);
        Base.payInvoice.SetVisible(false);
        // etc.
    }
}

Details can be found about 2/3 of the way down this helpful article (link) by Julia G, Acumatica Employee.

In Access Rights by Screen, Expand Receivables, then Invoices and Memos, then AR Invoice/Memo and you will see and be able to adjust rights for, all the possible Actions that may be taken from [...] menu:

HTH,

Laura

Hi Laura,

Thank you for your reply!

I tried following your steps in Access Rights by Screen (SM201020). However, when I expand AR Invoice/Memo > Actions > Pay and try to set the access right to Revoked for the Fact Viewer role, Acumatica automatically reverts the selection back to Inherited.

It seems the inheritance logic doesn't allow saving Revoked at the action level when the main screen is set to Read-Only.

Is there any step I might be missing in SM201020 to make that setting stick for this specific role?

Thanks again for your help!

Hello, 

Yes, if the new Access Right doesn’t stay after you change it, try going one level above what you just changed → I think it’s Invoices and Memos in this example -  and change THAT node from (whatever it is) to something explicit like Granted or Read-only.  Then comeback down to the Actions and you will be able to update Pay to View Only…. and the new setting will stick.

Laura

Hi ​@Laura03 ,

That worked perfectly! Changing the main node (AR Invoice/Memo) to an explicit status (Read-Only) first allowed me to save the Revoked access right on the Pay action without it reverting to Inherited.

Thank you so much for your help and guidance!