04-08-2008 4:37 AM
Hi,
I have a single role called xyz ,i need to use that role around 100 organisation and also i need to filter according to their respective organisation.How is it possible.Kindly recommmend a solution.
Regards
sekar.
04-08-2008 6:16 AM
from the info fiven i suggest to create a template (basis) role and derive that 100 times.
04-08-2008 10:35 AM
Hello,
Please use the base role derived concept where in Base role will have org values as * and dervied roles will have your defined org values.
04-08-2008 9:05 PM
>
> Hello,
> Please use the base role derived concept where in Base role will have org values as * and dervied roles will have your defined org values.
The base/master/parent role does not need to have * as org values, lots of places leave them blank.
04-08-2008 10:21 PM
I would agree with Alex.
I am not a fan of derived roles, but from that little bit which I do know this * would also "blurr" the fields which are OrgLevel fields from the others which you might have maintained as * because you don't want to use them as a control in your concept.
Or do OrgLevel fields have a special colour or some other identification in the master role?
Cheers,
Julius
04-09-2008 6:09 AM
Yes u r correct, org values can be left as blank.There is no separate color for org values in Master Role..
Julius i am not sure why are not fan of derived role concept as this is widely accepted concept in terms of security....
04-09-2008 7:23 AM
Hi Anil,
Derived roles are widely accepted, as are composite roles and having manual & changed status authorisation objects. It doesn't necessarily mean that they are the right thing to do. Sure, there is a time and a place for them (when we are only deriving at Org Level - quite possibly this scenario) but they can cause plenty of problems if used to support a design which doesn't lend itself to this technique.
Cheers
Alex