You are viewing limited content. For full access, please sign in.

Question

Question

Field security

asked on April 4, 2017

Here's my situation: I am working with a particular group in HR that should be the only group to read, write and modify a specific field in a template.  Members of that HR group also belongs to other smaller HR AD groups.  If I use the deny access right to deny access to that field to all AD groups except that HR group, it won't work because of their involvement in other groups, correct?  I've been testing this and can't come up with a different solution.

The particular HR group needs this field to name entries as they come in.  Other groups do not need to even see this field.

0 0

Answer

SELECTED ANSWER
replied on April 4, 2017

There's a 'View Effective Rights' tab in the field access security dialog. If you input a user there it should tell you how that user is getting access. 

Also, check if the Everyone group has allow rights. By default they do on fields. You'll need to remove that first for leaving the right blank to work. 

1 0

Replies

replied on April 4, 2017

Rather than actually denying access to the field, you should just be able to leave the access unmarked (not granted and not denied) for every group except the specific one you want to grant access to.

0 0
replied on April 4, 2017

I've tried leaving it unmarked but it still gave access to that field to a group that shouldn't have it.  Any thoughts on what I could possibly be doing wrong?

0 0
SELECTED ANSWER
replied on April 4, 2017

There's a 'View Effective Rights' tab in the field access security dialog. If you input a user there it should tell you how that user is getting access. 

Also, check if the Everyone group has allow rights. By default they do on fields. You'll need to remove that first for leaving the right blank to work. 

1 0
replied on April 4, 2017

That worked!!  Thank you so much!!

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.