Praktični primeri
Postavljanje dozvola novom korisniku
Kada se kreira novi korisnik, on je podrazumevano bez dozvole. Koncept podešavanja dozvola je davanje novih neophodnih dozvola samo novom korisniku, a ne davanje svih dozvola i njihovo kasnije opozivanje. Kada se odobravaju određene dozvole, u ovom slučaju se eksplicitne dozvole postavljaju korisniku, druga nedefinisana odobrenja mogu se naslediti od roditelja ili od grupa.
Ako je korisnicima potrebna samo dozvola za narudžbine, tada je dovoljno dodati dozvole za narudžbine. Klikom na 
dozvole su postavljene na podrazumevano, pune. Takođe su sve dete autorizacije naloga zadatake na punu vrednost.
 |
Klikom na desni taster miša za kopiranje dozvola na dete ovlašćenjima:  |
Sva dete autorizacije Narudžbina takođe nasleđuju pune dozvole (nasleđeno). Dozvole su takođe definisane. Ako je dozvola za promenu prodajne cene prethodno izričito podešena na određeno odobrenje, onda ona ne nasleđuje dozvole od roditelja. Isto se odnosi i na dobijanje dozvola od grupe.
Korisničke i grupne dozvole
U kompanijama sa više odeljenja (prodaja, finansije, marketing...) korisnici Pantheon-a obično treba da budu smešteni u grupe. Grupi se takođe mogu dodavati određene dozvole.
Dodavanje korisnika u grupu na korisničkom nivou:
Dodavanje korisnika u grupu na grupnom nivou:
Grupa je definisala dozvole Čitanje za Narudžbine:
Korisnik ima nedefinisane dozvole za narudžbine. Dozvole nisu izričito postavljene:
After user becomes a member of a group, it acquires all permissions from a group that are not explicitly defined at a user level. In this case user acquires permission read for orders. If permissions for orders on user level are explicitly set, then user would not acquire permissions from a group. Explicitly set permissions at user level take precedence over permissions set at group level and are therefore not acquired. User can also be a member of multiple groups and in case it has no explicit permissions, it will acquire the highest permission from a group.
Copying permissions
1. Copying permissions can be done on authorization level for current authorization and all child authorizations. In this case only authorizations are copied, but not document types, statuses and registers.
Copy does not affect this level of authorizations:
- Item categories
- Cost center
- Subject types
- Departments
- Warehouses
- Chart of accounts
- Bank statements
- Automatic posting templates
- Financial reports
- Dashboards
- Dashboard components
- Pantheon applets
- Reports
Copying document types, statuses and registers can be done only for specific document type, statuses and register, other permissions will not be copied.
Example: copying permissins of parent authorization Subjects will not copy child permissions of warehouses and departments. For copying permissions of warehouses and departments from other user/group you need to navigate to warehouses or departmenst authorization and copy permissions.
2. Copying all permissions: authorizations, document types, statuses and registers from another user or group can be done on security level of user. Copying permissions can be done with checkbox membership or not. If copying only with checkbox permissions, then only user permissions are copied, if also membership checkbox is enabled, then also membership is copied and permissions from a group.
Permissions and memberships can also be copied to another user on different databse on the same sql server instance. The same user and groupname must exist on another database in order for copying is successful. Multiple selection is possible with use of shift or ctrl keyboard button. When checkbox "Permissions" is enabled, only user permissions are copied (permissions that are explicitly set on a user), permissions that user aquires from usergroup are not copied. If ckeckbox membership is enabled Group permissions are also copied. If group on target database does not exist, membership is not copied. Databases must be upgraded on the same version.
