Does anyone know the hierarchy of security groups vs Field Security? Does one override the other? We have a security group that was setup that provides access to some UD fields in the OrderDtl table on an updateable DB. This Security shows up in the OrderHed field security as having full access to all the fields in the OrderHed, including ReadyToFulfill which is a Customer Service function but we recently saw someone in the purchasing department was able to change it even though he is not part of the Order Entry Security group but is part of the Order Dtl UD Field Security group. So, does field security override group security?
1 Like
The security groups don’t automatically add or remove anything without something in place like a BPM or a customization or used in field security. So you’ll have to figure out what got wired up to use the security group to determine how it’s supposed to work.
I don’t use field security too much because there are too many issues for me to have to work around, so I just end up using BPM’s to create the desired security. I’m sure there’s some hierarchy about which security is applied if you have conflicting groups. I would imagine it’s the one with the most access, but I’d have to test it to be sure.
3 Likes
I have reviewed the BPMs (both Method and Data) and cannot see anything that stands out that would allow this to happen. I am going to speak to the individual today and see what he was doing that allowed him to change it. I find Field Security is useful for specific fields that may be in an UI that really should be a certain groups function and yes, it sometimes can be an issue but I only use on rare occasions.
1 Like