Security Attributes

Security attributes conditionally update the users belonging to a team when you change the access that the team has to a module or function. Many of the access permissions granted to members of teams in Greentree Desktop work on the least restrictive principle.

For example, a user belongs to two teams that have access to CRM Sales. One team can only view costs; the other team can edit and hide costs. In this case, the least restrictive option is to give the user permission to edit, hide, and view costs in CRM Sales.

If access to a module or function is:

Removed from a team, a user who is a member of that team only loses access if the other teams they're assigned to do not have access to that module or function.
Granted to a team, a user who is member of that team gets access to the module or function regardless of the security applied to the other teams that they belong to.

Note: If a user is added to or removed from a team, all the security attributes for the teams that the user still belongs to update for the user.

Any team with the Ignore for security settings option selected is ignored when updating the user.

Changing Team Security Settings

Here are a few examples that illustrate how applying the least-restrictive option to a user who is a member of multiple teams works changing a team's permissions:

Changing a Setting from True to False

When you change an option from true to false on one or more teams, the user's value is set to false only if that value for all of the other teams that the user belongs to is also false.

Option Type	Team A	Team B	Team C	User Setting
Boolean	False	False	False	False

Changing a Setting from False to True

When you change an option from false to true on one or more teams, the user's value is set to true.

Option Type	Team A	Team B	Team C	User Setting
Boolean	True	False	False	True

Changing a Decimal or Integer Option to a Higher Value

You set the Maximum Order Value option on the Sales Order User Preference > Order Entry Control tab to these values for each team:

Team A - 400
Team B - 100
Team C - -250

The user value is set to the highest value for the teams (in this case, 400):

Option Type	Team A	Team B	Team C	User Setting
Max Number	400	100	-250	400

Changing a Decimal or Integer Option to a Lower Value

You set the Minimum gross profit % option on the Sales Order User Preference > Order Entry Control tab to these values for each team:

Team A - 400
Team B - 100
Team C - -250

The user's setting is the lowest value for the teams (in this case, -250):

Option Type	Team A	Team B	Team C	User Setting
Min Number	400	100	-250	-250

Changing Security Settings from a Dropdown List

A dropdown list contains these access options (in order of increasing restrictiveness): Edit, View, Module Default, and Hide. If you select Hide from the list for one team but another team the user belongs to is set to View, then the user's setting is changed to View:

Option Type	Team A	Team B	Team C	User Setting
Dropdown List Item	Hide	Module Default	View	View

Another dropdown list contains these access options: Manual and Module Default. If you change the setting to Manual for one team, but the teams that user belongs to are set to Module Default, then the user's setting is changed to Module Default:

Option Type	Team A	Team B	Team C	User Setting
Dropdown List Item	Module Default	Module Default	Manual	Module Default