Hi, Andrew, and thanks. What I am looking for is a way to allow certain users write access only to a small subset of the columns on a custom entity. They can view any other column.
Everybody else with access to the entity should have read/write access to all the columns.
It sounds like what I have to do is make all columns EXCEPT the small subset Secured. Then create two Security profiles, one for most users that has create/read/write access to the many Secured columns and one that has read access to the many Secured columns.
For both profiles, they would have access to the unsecured columns by virtue of the relevant Security role.
Not robust, but it will make the client happy.
Or maybe I can talk the client into skipping the whole thing and just telling the small group of users not to touch the other columns. They're busy and shouldn't have the time to mess with anything that isn't their primary responsibility anyway. Plus we have an audit trail.
