
Hello All,
I'm trying to implement security for PSA and the requirement is to hide Cost Price for resource roles for the entire organization and yet the users should be able to perform their work i.e. being able to create Projects, Quotes, Contracts etc. This includes hiding various fields on entities like Price Lists, Project Task, Actuals, Facts or any entity that holds cost information of a resource role in any form i.e. sometimes the cost price maybe total accumulation (hours multiplied by unit cost price).
PS: Sales Price can still be visible.
I cannot simply take away all permissions from the security roles at entity level, as that will impact the system level plugins that access the Price Lists (or Unit Cost Price on Project Task etc) for various calculations/operations and i cannot even use field level security since even that will have same effect on the plugins.
I'm unable to come up with a strong security model that will implement the above described requirement. I hope at least a few in this community would have come across such a requirement, if yes please share any recommendations or ideas. At the moment, i am thinking to restrict access by using security roles on forms there by not allowing them to access the data and using javascript hide the entities on Advance Find. This way the users will still have permissions to data but they wont have visual options to view the data.
Any thoughts or insights would be of a great help.
Thanks,
Suresh