Operations Registry entry
Assign permissions to users / groups on a per table basis.
Usage
This Registry entry can be assigned to users and groups:
| Key | User | User | Group | Group | Group | Group |
|---|---|---|---|---|---|---|
| Key 1 | User
|
User
|
Group
|
Group
|
Group
|
Group
|
| Key 2 | user | user | group | group | Default
|
Default
|
| Key 3 | Table
|
Table
|
Table
|
Table
|
Table
|
Table
|
| Key 4 | table | Default
|
table | Default
|
table | Default
|
| Key 5 | Operations
|
|||||
| Value | priv;priv;... | |||||
User
|
user | Table
|
table | Operations
|
priv;priv;... |
User
|
user | Table
|
Default
|
Operations
|
priv;priv;... |
Group
|
group | Table
|
table | Operations
|
priv;priv;... |
Group
|
group | Table
|
Default
|
Operations
|
priv;priv;... |
Group
|
Default
|
Table
|
table | Operations
|
priv;priv;... |
Group
|
Default
|
Table
|
Default
|
Operations
|
priv;priv;... |
where:
| priv;priv;... | is a semicolon separated list of permissions: | |||||||||||||||||||||||||||||||||||
|
Tip:
Think of da as "define access".
The Operations and Table Access Registry entries work hand in hand: the Table Access Registry entry determines which tables (modules) a user / group is permitted to access; the Operations Registry entry then determines what actions the user / group is permitted to perform on records in the table.
Note: There must be an Operations Registry entry for each table to which the user / group has been granted access through the Table Access Registry entry.
Examples
This entry specifies permissions for the Admin group on all modules:
| Key | Setting |
|---|---|
| Key 1 | Group
|
| Key 2 | Admin
|
| Key 3 | Table
|
| Key 4 | Default
|
| Key 5 | Operations
|
| Value | daQuery
|
Note:
If the permissions are the same for all tables, enter Default in Key 4 instead of the name of a table. This will reduce the amount of Registry entries required for a group.
The Volunteers group are only allowed to search, view and edit Parties records:
| Key | Setting |
|---|---|
| Key 1 | Group
|
| Key 2 | Volunteers
|
| Key 3 | Table
|
| Key 4 | eparties
|
| Key 5 | Operations
|
| Value | daDisplay
|
Note:
If daEdit privilege is not provided, all fields in records returned by a search will be read-only (they will appear grdaEdit privilege and use the Column Access Registry entry to restrict access to required fields.