This feature controls access to portions of an object’s data based on the interface definition that exposes that data. For example, you can limit access to the properties and relationships of an object from a specific instantiated interface to only the users of a particular owning group.
Using the interface definition owning group to control access impacts performance
for operations, such as using shortcut menus, building forms, filling the properties
grid, evaluating methods on shortcut menus, and others. The interface definition owning
group access control is disabled by default to help improve performance.
To enable this feature, see Configure the system options.
Here are some of the typical types of configuration:
Hide part of an object from a set of users
This will prevent these users from seeing the data. It will also hide any relationship navigation from these interfaces and hide any configured shortcut menu methods.
-
Identify an owning group to which you want to grant access.
-
Make sure this owning group is configured on the roles that you want to grant access and not configured on roles that you want to hide the data from.
-
Relate the owning group to the Interface containing the data to which you want to grant access, setting the exclusive access property. This prevents other owning groups from accessing the data.
Restrict part of an object to read only access for a set of users
This will prevent these users editing the data.
-
Identify an owning group to which you want to grant write access.
-
Make sure this owning group is configured on the roles that you wish to grant write access and not configured on roles that you wish to grant read only access.
-
Relate the owning group to the Interface containing the data to which you want to grant write access without setting the exclusive access property. By not setting this property, other owning groups will see the data as read only.
Hide part of an object from some users and restrict others to read only
This will hide the data from some users and prevent other users editing the data.
-
Identify an owning group to which you want to grant write access.
-
Identify an owning group to which you want to grant read only access.
-
Relate the writable owning group to the interface, setting the exclusive access property.
-
Relate the read only owning group to the interface, setting the read only property.