I used this method to lock down both Modify All and Delete permissions on all of our current forms. But I wanted the administrator to still have access to these options so i created a view with them enabled.
Now the only problem is the Default Form View field available on the Advanced tab of the User Options under Tools. If a user knew the name of the Admistrator view, they could enter it into that field, and then open that view for all the forms that they can reach from the object list and using any workflow that does not specify a specific view. Granted for regular Users this will only grant Modify All permissions and they would need to know the exact name of the view for all forms, but this is still a loophole that could be exploited. Is there any way to disable this field in the menu or to deny permissions to certain views? I have gone into the actual User Preference form and disabled that field, but it still works in the menu item. The closest i could get to blocking it was a filter that set the default view to null if the user is not an administrator, but this does not seem to apply to the user until the next time they log in. But durring the session that they specify a default view the name they entered remains in use. I can not get this to overwrite their entry while they are in the options pop-up which would be the ideal place to do it. Gary Roach wrote: > > List, > > Is it possible to remove the Delete option in the tool bar so users cannot > delete records ? Currently, they can go to ->Actions ->Delete and delete > records. I had a filter that ran on Delete but, it was somehow causing my > archiving not to run. I disabled it and archiving ran. I still do not > want the users to be able to delete records. > > Adminstrator=6.3 patch 15 > HP-UX > Client=6.00.01 patch1364 > > Thank you, > > Gary Roach > Project Services Analyst > [email protected] > T 724.539.1510 > F 724.539.5797 > > Kennametal Inc. | 1600 Technology Way | Latrobe, PA 15650 | > www.kennametal.com > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > > -- View this message in context: http://old.nabble.com/Delete-Option-tp19991664p28394604.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are"
