Monday, April 7, 2008

GP 10 Security : Power User is more Powerful than all other roles combined!

Recently we got a request to remove access to one window in GP for a user, who was otherwise a "Power User".

We had to remove access to the 'Challenging' Posting Setup Window, which I would write about in detail sometimes soon. Depending upon your experience with the Posting Setup Window you can substitute 'challenging' with words of your choice.

So we created a new role, selected all tasks in it, just removed access to posting setup window. We then changed the role of the user from Power User to this new role.

A week later, the user started reporting problems. It turned out even with all tasks assigned to the user, they didn't have access to certain areas. This was because - there were no tasks for those areas. I had written about how there are no inbuilt tasks Safe Pay Earlier.

So we ended up creating new tasks for all these areas. This was an iterative process, where we created tasks for various products. I will try and document all these areas in the future for your reference. It is a lengthy process to create tasks for all these missing modules in an organized way.

Meanwhile, Mr Power Users can keep their legacy for a while longer.


Anonymous said...

I've been trying to remove Setup Checklist from users menu, but I guess it's one of those no existent tasks.

Jivtesh Singh said...

Actually Mr Anon, There is a task Admin_Company_009 - Did you try that?

Anonymous said...

It's not the task in Admin_Company_009. It's the task under Tools->Setup->Setup Checklist. I searched everywhere and couldn't find it. It's not a critical, but annoying that I can't disable it.

Mr. Anon.

Unknown said...


Yes I also wanted to
remove Setup Checklist from users menu.

Please let me also let me know if any clue found.