Authority Checking

When a User attempts to access a function, authority levels are checked according to the following rules. These checks are only made if security has been activated (see previous section on switching on security).

  • 1. If the User has not been added as a User on the Maintain User Authorities screen, access is denied.
  • 2. If this is not a Project specific function (i.e. it is controlled by the General Authorities accessed using F7 from the Maintain User Authorities display), the general authorities for the User are checked.
  • 3. If a Project is being added and the User has sufficient authority to perform this function, an entry for this User on the Maintain User Authorities display for *NEW Projects will be searched for. If an entry is found an additional entry will automatically be created for the new Project with the same authority levels as the *NEW entry.
  • 4. If a Project is being added and there is no *NEW entry on the Maintain User Authorities display, an entry for *ALL Projects will be searched for. If an entry is found an additional entry will automatically be created for the new Project with the same authority levels as the *ALL entry.
  • 5. If a Project is being added and there are no *NEW or *ALL entries on the Maintain User Authorities display, the User will have no authority to the Project they have just created.
  • 6. When a Case is being copied, the User must have ‘All’ authority to that Case type in the target Project.

When the User attempts to perform Project specific functions, authority is checked in the following sequence if the Project has a status of ‘Secured’. If none of the following entries are found then access is denied.

  • 1. An entry for the specific Project on the Maintain User Authorities screen for that User.
  • 2. An entry for the Application Group to which the Project belongs on the Maintain User Authorities screen for that User.
  • 3. An entry for *ALL Projects on the Maintain User Authorities screen for that User.