I used this method to lock down both Modify All and Delete permissions on all of our current forms. But I wanted the administrator to still have access to these options so I created a view with them enabled.
Now the only problem is the Default Form View field available on the Advanced tab of the User Options under Tools. If a user knew the name of the Admistrator view, they could enter it into that field, and then open that view for all the forms that they can reach from the object list and using any workflow that does not specify a specific view. Granted for regular Users this will only grant Modify All permissions and they would need to know the exact name of the view for all forms, but this is still a loophole that could be exploited. Is there any way to disable this field in the menu or to deny permissions to certain views? I have gone into the actual User Preference form and disabled that field, but it still works in the menu item. The closest i could get to blocking it was an active link that set the default view to null if the user is not an administrator, but this does not seem to apply to the user until the next time they log in. But durring the session that they specify a default view the name they entered remains in use. I can not get this to overwrite their entry while they are in the options pop-up which would be the ideal place to do it. Gary Roach wrote: > > This works great. Thank you all for your responses. > > Thank you, > > Gary Roach > Project Services Analyst > [email protected] > T 724.539.1510 > F 724.539.5797 > > Kennametal Inc. | 1600 Technology Way | Latrobe, PA 15650 | > www.kennametal.com > > > > > Rohini Prasher <[email protected]> > Sent by: "Action Request System discussion list(ARSList)" > <[email protected]> > 10/15/2008 07:42 AM > Please respond to > [email protected] > > > To > [email protected] > cc > > Subject > Re: Delete Option > > > > > > > ** > You can do this in aradmin, select the required view of the form, open > view properties, in menu access tab of view properties, deselect delete > option. > > Regards, > Rohini Prasher > > From: Action Request System discussion list(ARSList) > [mailto:[email protected]] On Behalf Of Gary Roach > Sent: Wednesday, October 15, 2008 5:01 PM > To: [email protected] > Subject: Delete Option > > ** > List, > > Is it possible to remove the Delete option in the tool bar so users cannot > delete records ? Currently, they can go to ->Actions ->Delete and delete > records. I had a filter that ran on Delete but, it was somehow causing my > archiving not to run. I disabled it and archiving ran. I still do not > want the users to be able to delete records. > > Adminstrator=6.3 patch 15 > HP-UX > Client=6.00.01 patch1364 > > Thank you, > > Gary Roach > Project Services Analyst > [email protected] > T 724.539.1510 > F 724.539.5797 > > Kennametal Inc. | 1600 Technology Way | Latrobe, PA 15650 | > www.kennametal.com > __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > html___ > > DISCLAIMER: > ----------------------------------------------------------------------------------------------------------------------- > > The contents of this e-mail and any attachment(s) are confidential and > intended for the named recipient(s) only. > It shall not attach any liability on the originator or HCL or its > affiliates. Any views or opinions presented in > this email are solely those of the author and may not necessarily reflect > the opinions of HCL or its affiliates. > Any form of reproduction, dissemination, copying, disclosure, > modification, distribution and / or publication of > this message without the prior written consent of the author of this > e-mail is strictly prohibited. If you have > received this email in error please delete it and notify the sender > immediately. Before opening any mail and > attachments please check them for viruses and defect. > > ----------------------------------------------------------------------------------------------------------------------- > __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > html___ > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > > -- View this message in context: http://old.nabble.com/Delete-Option-tp19991664p28394647.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are"
