Calem Blogs

Blogs of CalemEAM
Featured 

How to Do Access Control by Roles (Group Design for Modules Access)

Access control by roles is managed by Group Design. The Calem desktop UI is improved for group design mode thanks to customer feedbacks. Use "Group Design" to manage modules and menu available for modules.

  • Go to "Admin" module (click "Admin" from the left module bar, or top module bar).
  • Go to the Group list. Each group represents a role.
  • Check the checkbox of a group for group design (for instance, "Service-Tech" in the screenshot). 
  • Click "Group design" menu button of the group list form to launch group design mode.

"Group design" menu launches Calem desktop into the design mode for "Service-Tech" group.

  • The top band of the desktop is turned yellow.
  • The group selected for group design ("Service-Tech") is shown in red.
    • The group is not shown in the top band if module bar is docked at the top.
  • The left module bar is changed to show three modules granted to the "Service-Tech" group.
  • All the customization will be done for the group selected while the group form is left open.
  • When the group form is closed the group design mode is terminated.

1. Modules Access Setup

Module Access Setup defines what modules are available to a group. Click "Module accessible" menu button in the "Group modules" list form above to launch module access setup screen below.

  • The left panel shows modules that are not accessible to the group
  • The right panel shows the modules granted to the group
  • Drag a module from right panel and drop on "Module Design" of the left panel to remove a module for the group
  • Drag a module from left and drop on "Module Design" of the right panel to add a module to the group.
  • Order modules accessible in the right panel by drag-and-drop a module to another module. For instance, drag "Service Request" and drop on "Work Order" will move the "Service Request" module to show before "Work Order" module.
  • When you are done, click "Save" in the left panel to save the modules accessible to the "Service-Tech" group.

2. Module Menu Access Setup

Module Menu Access Setup defines what menu items are available to a group.

  • Click a module row in the group design list form to select a group. For instance "Work Order" module row is clicked.
  • Menu "Module Design" is activated. Click this menu to set up menu items available for the group.

The "Module Design" menu button launches the module function design form below. You can tailor a module's function for the group:

  • Remove a menu (1) or a menu folder (2) by drag a menu/folder in the right panel and drop on the "Module Design" node in the left panel.
  • Add a menu (3) or a folder to the group by drag and dropping a menu/folder from the right panel and drop on "Module layout" in the right panel.
  • Order a menu item (4) in the right panel by drag and drop it to another menu or a folder.
  • Drag and drop a menu to "Default menu item" to make a menu item (5) the default menu to use when the module is clicked from the left module bar. For instance, drag and drop "Open WO" on the "Default menu item" will make "Open WO" form to open when work order module is clicked.
  • Click "Save" in the left panel to save off the module function setup when you are done.

 3. Group Design Report

The report is available at Admin | Report | Group Customization. Use this report to find out what has been customized. 

  • For instance, which groups are customized for module access? 
  • Query the object for "modlist" to get all the groups.

Another question may be what groups have inventory and barcode module customized. Query object for Inventory (modCmIn) or Barcode (modCmBc) to find out.

 You can also query which groups customized Site Inventory forms and reports such as CmInSiteViewEdit, CmInSiteReportList, etc. Query object for "CmInSite" will show all the views/reports customized by groups.

4. Group Hierarchy and Access Control

Groups are hierarchical for efficient management of customization. Here is the process for Calem to find a customization of an object:

  1. If a group has a customization of an object, use it.
  2. Otherwise, go to the parent group of the current group, if a customization is found, use it.
  3. Otherwise, repeat the parent group search.

 5. Access Control through Group Design

The steps to restrict access to an object are:

  1. Remove access to an object at the root group (Custom system) which removes the access to an object by default for all groups.
  2. For the groups to grant the access to an object, perform a group design to grant the access to an object. So, only designated groups have access to that object.
Two examples are discussed below to demonstrate access control customization.

6. Example 1: Restrict Access to Physical Count Transaction

We will grant access to physical count transactions to "Service-Tech" and "Procure" groups only (see the groups in the screenshot of group tree above). The menu for physical count transaction is highlighted in the menu search tree below. The steps are:

  1. Group design "Custom system" group
  2. Remove highlighted physical count menu from Inventory and Barcode modules respectively.
  3. Group design "Service-Tech" group. Add physical count menu to Inventory and Barcode modules.
  4. Group design "Procure" group. Add physical count menu to Inventory and Barcode modules.
  5. Run Group Customization Report to query the groups with Inventory ("modCmIn") and Barcode ("modCmBc") module customization.
  6. Group design each group to review the module menu for Inventory and Barcode. Ensure that only "Service-Tech" and "Procure" group has the menu for physical count transactions.

 7. Example 2: Restrict Inventory Auto Re-Order Management

We will grant access to inventory auto re-order control to "Procure" group only. The fields related to the auto re-order control are highlighted in the form below. The steps are:

  1. Group design "Custom system" group
  2. Go to Inventory | Site Inventory List, click an inventory row to open the inventory form.
  3. Edit the inventory, customize the edit form, drag and drop to remove the highlighted fields for re-order control from the edit form.
  4. Group design "Procure" group
  5. Go to Inventory | Site Inventory List, click an inventory row to open the inventory form.
  6. Edit the inventory, customize the edit form, drag and drop to add the highlighted fields for re-order control to the edit form if applicable.
  7. Run Group Customization Report to query the groups with "CmInSiteViewEdit" customization.
  8. Group design each group to review the re-order control fields. Ensure that only "Procure" group has the re-order control fields in the inventory edit form.
Preventive Maintenance (PM) Custom Fields
Project Inventory

By accepting you will be accessing a service provided by a third-party external to https://eam.calemeam.com/