Scenario 2 - Understanding rights at design time and runtime
This scenario illustrates the rights different people need in order to view, use (execute), modify, and delete a form and the views on that form, both at runtime and design-time. Remember that you need rights on the parent category if you want to view the objects in the category tree. For this scenario, parent category rights and inheritance are not shown, let us assume that rights have been set specifically on the form and views contained in the form.
In this scenario, we want Mike to be able to create new items in a specific category, and edit the form as well as the views in that form. Eric should not be able to modify the form, but he needs permissions to change one of the views on the form. Jill only needs to run the form at runtime; she should not be able to edit the form or any views on the form. Both Mike and Eric should be able to run the form at runtime.
To apply this scenario. the following roles and rights are required:
Mike's Rights |
||||
| Component | Rights | Permissions | Effective Runtime permission | Effective Design-time permission |
|---|---|---|---|---|
| Category folder | Create | Allow | (Not applicable to runtime) | Can create a new categories (folders) and SmartObjects, views, and forms in the folder. |
| Form |
View |
Allow | (Not applicable to runtime) | Can locate and open the form. |
| Modify | Allow | (Not applicable to runtime) | Can change the form. | |
| Delete | Allow | (Not applicable to runtime) | Can delete the form. | |
| Execute | Allow | Can open and run the form | (Not applicable to design-time) | |
| View 1 | View | Allow | (Not applicable to runtime) | Can locate and open the view. |
| Modify | Allow | (Not applicable to runtime) | Can change the view. | |
| Delete | Allow | (Not applicable to runtime) | Can delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |
| View 2 | View | Allow | (Not applicable to runtime) | Can locate and open the view. |
| Modify | Allow | (Not applicable to runtime) | Can change the view. | |
| Delete | Allow | (Not applicable to runtime) | Can delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |
Eric's Rights |
||||
| Component | Rights | Permissions | Effective Runtime permission | Effective Design-time permission |
| Form |
View |
Allow | (Not applicable to runtime) | Can locate and open the form. |
| Modify | Deny | (Not applicable to runtime) | Cannot change the form. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the form. | |
| Execute | Allow | Can open and run the form | (Not applicable to design-time) | |
| View 1 | View | Allow | (Not applicable to runtime) | Can locate and open the view. |
| Modify | Allow | (Not applicable to runtime) | Can change the view. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |
| View 2 | View | Allow | (Not applicable to runtime) | Can locate and open the view. |
| Modify | Deny | (Not applicable to runtime) | Cannot change the view. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |
Jill's Rights |
||||
| Component | Rights | Permissions | Effective Runtime permission | Effective Design-time permission |
| Form |
View |
Deny | (Not applicable to runtime) | Cannot locate and open the form. |
| Modify | Deny | (Not applicable to runtime) | Cannot change the form. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the form. | |
| Execute | Allow | Can open and run the form | (Not applicable to design-time) | |
| View 1 | View | Deny | (Not applicable to runtime) | Cannot locate and open the view. |
| Modify | Deny | (Not applicable to runtime) | Cannot change the view. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |
| View 2 | View | Deny | (Not applicable to runtime) | Cannot locate and open the view. |
| Modify | Deny | (Not applicable to runtime) | Cannot change the view. | |
| Delete | Deny | (Not applicable to runtime) | Cannot delete the view. | |
| Execute | Allow | Can open and run the view | (Not applicable to design-time) | |