Start a new topic

Row level Access & Workflows

Hi -


We have following scenario:

a) We have master data records belonging to three countries - USA, MEX & CAN. They refer to USA, Mexico and Canada.

b) We want to let all users see all the records . That is a user from USA can see master data records of Canada and Mexico as well.

c) However, we want to give a user permission to 'edit' records only of his/her country. That is a user from USA can modify/edit only USA records but not Mexico or Canada records.

d) We have a workflow that routes any request to edit/modify a record to a Global Data Steward.


Can you please suggest how we can achieve this ?


Thanks for the help


Hi Sumit, 

Have you tried to create a SemQL filter in the Model Privilege Grants?  You can configure the filter to only allow that role edit access. The filter SemQL would look like this CountryName='USA' or CountryName='Canada' or CountryName='Mexico' 

image

Hi,

I have similar business requirement where user want to view all the records, but he/she will be able to edit (through an approval workflow) only applicable records based on some filter.

Scenario is like: 

We have different Business Groups: Credit, Debit, Reporting, HR, Ops.

For a specific view for Credit Groups users want to see/view all the records from all the business groups.

But if they want to edit any records with Business Group <> 'Credit' then 'Start  edit workflow' should appear as disable he/she should not able to edit that record.

They should be able to initiate the EDIT workflow only for the Records where Business group ='Credit'.


I have tried the filter at Model Privileges section inside the Semarchy Model as suggested above.

Created a role with read only (with no filter) for the 'Credit Group'

Created another role with read/write (with Business group = 'Credit' filter)

Then assigned a user both the roles. 

But it is not working as expected. Can you please provide any alternative way to achieve this requirement.

(Here for edit Approval workflow is also required)


Thanks in advance for your help.


Regards,

Kousik





Login to post a comment