Content permissions
Define which companies, invoices, events and storage accounts a user or a user group may see data of.
The content permission is the third protection layer: it does not say what someone may do, but on whose data. For example an accountant should only see the invoices of Sample Ltd. and Example plc. Only the super administrator can set it.
Adding a restriction
- Open Users → Content permissions. The list shows one row per subject (user or group).
- Click Add, or the edit icon in the row of an existing subject.
- Choose the Subject type (user or group) and the Subject (user / group).
- Choose the Object type, for example company, invoice customer, invoice supplier, invoice type, event, storage account.
- Search for a value in Search a value to allow… and add it. For many values use Select all, Add selected and Remove selected.
- Delete all rules of a subject with the Delete icon in its row.
How it applies
- If the user has their own rule, only that counts; otherwise the group's rule.
- If neither the user nor the group has a rule for an object type, there is no restriction.
- No restriction applies to the super administrator.
- The "whose usage they see" rule decides whose credit account someone can see on the subscription pages.
Example
Accountant Anna Kovács may only see the data of two clients. You choose her as subject, company as object type, and add Sample Ltd. and Example plc. From then on only these two companies appear in her company filters and lists.