Back Forward Access Deny form
Completing the Security tab

About

For each of the eight categories in the array, you can enter a numeric value between 1 and 5, or reference an Access When rule. Access is denied when the Access Control value is greater than or equal to the production level of this system. When an Access When rule is used, the system evaluates the rule and denies access when the result of the Access When rule is True.

If a field contains 0 or is blank, access is permitted (not denied).

Users may need the first five types of access to operate on instances. The last three types are usually needed only by application developers.

The production level of the system is set in the prconfig.xml file and is visible on the System form.

Field

Description

Access Controls R-10247
Open Instances

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule.

This determines whether holders of the access role identified as the first key part of this rule can open existing instances of the class identified in the second key part of this Access Deny rule.

Modify Instances

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule.

This determines whether holders of the access role identified as the first key part of this rule can save new or modified instances of the class identified as the second key part of this rule. Save, not modify true?

Delete Instances

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule.

This determines whether holders of the access role identified as the first key part of this rule can delete instances of the class identified as the second key part of this rule.

Search Instances

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule.

This determines whether holders of the access role identified as the first key part of this rule can search through instances of the class identified as the second key part of this rule. Informally, this is known as "read-only" access.

Execute Activities

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the Access Class key part of this Access of Role to Object rule and class inheritance to find the Access When rule.

This determines whether holders of the access role identified as the first key part of this rule can execute activities that belong to the class identified as the second key part of this rule.

Open Rules

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.

Tip As a best practice, create the Access When rule in the Rule- base class. That is, set the Applies To key part of the Access When rule to Rule-. B-13040 GENTJ

This determines whether holders of the access role identified as the first key part of this rule can open rules with the class as a key part.

Modify Rules

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.

TipAs a best practice, create the Access When rule in the Rule- base class. That is, set the Applies To key part of the Access When rule to Rule-. B-13040 GENTJ

This determines whether holders of the access role can save new or modified rules with the class as a key part.

Delete Rules

Optional. Enter the When Name key part of an Access When rule, or a level value between 1 and 5.

If you enter a name, the system uses the class of the primary page at runtime to locate an Access When rule.

TipAs a best practice, create the Access When rule in the Rule- base class. That is, set the Applies To key part of the Access When rule to Rule-. B-13040 GENTJ

This determines whether holders of the access role can delete rules with the class as a key part.

Up About Access Deny rules