RE: restrict access to Projects and project transactions
Hy Andre,
that is exactly is customers pain.
We know "My Projects" which prefilters for the current user unchangeable as he is a Sales Manager, Project Manager or Project Controller:
((WorkerResponsible==HCMWorkerLookup::currentWorker())&&(WorkerResponsible!=0))||((WorkerResponsibleSales==HCMWorkerLookup::currentWorker())&&(WorkerResponsibleSales!=0))||((WorkerResponsibleFinancial==HCMWorkerLookup::currentWorker())&&(WorkerResponsibleFinancial!=0))
This works fine for the first step.
But as we go from Manage/Related Information/Pending transaction or Posted transactions there is just a column filter in the grid which filters to the current project.
So user only needs to remove the Project-ID from column filter and can see all transactions of all projects, what is not desired.
Same situation at Manage/Bill/Invoice journals, they just need to activate the show filter pane and remove the Project-Id to get access all project invoices.
How do other Customer handle this?
As it is large company with a lot of different Business Units and departments, what would you suggest as you are very experienced in secutiy designs?