Re: Re: What are and how do Document Access and Series Posting Permissions security operations work?
I'm not sure if I fully understand what you mean by "control posting through limiting access to the functions that would be posted."
We are currently set up with "Post to General Ledger" and only batch posting. I'm only granting tasks that the user needs and am creating custom tasks when the default tasks are too broad.
For example, we have a role that receives the error "You do not have authorization to post transfer transactions." when the user attempts to post a PA Inventory Transfer batch. The role has the following tasks (amongst others) assigned to it:
TRX_PA_005* - Project Accounting inventory transfer entry
TRX_PA_008* - Project Accounting purchasing entry
TRX_PA_010* - Project Accounting series posting
One would think that tasks TRX_PA_005 and TRX_PA_010 would be adequate to create PA inventory transfers and post them, but that appears to not be the case. I found this post which says that Project Accounting wants the user to have TRX_FIN_003 permission to post inventory transfers. I tested it and sure enough the batch posted without any errors. However, only two individuals in our organization will have the TRX_FIN_003 task (the ability to enter GL transactions), so I started looking for what operation in this task allowed the inventory transfers to post. Through a process of elimination I found that only the (Financial) Series Posting Permission "General Entry" operation is needed for the inventory transfer posting. I have since added this operation to a custom task to allow PA users to post their batches, without being able to manually enter GL transactions.
So, I believe I've attempted to "control posting through limiting access to the functions that would be posted" but that is not enough as the Financial Series Posting Permission General Entry operation appears to be required as well to post from PA. I was hoping that a better understanding of Series Posting Permissions and Document Access operations would help me understand this odd behavior. Thanks for the assistance!