I have a concern about this issue: Currently the system administrator can manage all the access without reading the code but with this new feature it is not possible for a system administrator to know that there is no need to create an access for the invoice lines because they one's from the invoice field are used.
I'm wondering if we should add some field on the user interface to denote this fact.
On 2020-12-02 09:38, Sergi Almacellas Abellana wrote:
> I have a concern about this issue: Currently the system administrator can manage all the access without reading the code but with this new feature it is not possible for a system administrator to know that there is no need to create an access for the invoice lines because they one's from the invoice field are used.
That is not a problem. He will create two rules but the result will be
the same.
> I'm wondering if we should add some field on the user interface to denote this fact.
We could add a flag the fields that are used to delegate access right.
I'm wondering if we should add some field on the user interface to denote this fact.
We could add a flag the fields that are used to delegate access right.
That makes sense for me but with a proper help text. The idea is that the administrator is aware of it and avoids duplicating access rules.