Controlling access

The module's core lesson. Build a document type security profile, attach it to a data role from Module 2, configure restrictions on who can manage records of a given type, then demonstrate with three logins — an HR generalist who sees general types, a specialist who sees a restricted type, and a manager who sees almost nothing. Then show self-service, what a worker sees of their own records, and the manager view of a team member's documents. Test with real logins, always. Document access is the configuration most likely to be assumed correct and be wrong, because the failure state is invisible from an admin account — which sees everything. The manager view is the one clients forget. Ask explicitly: should a line manager see a disciplinary record? A medical certificate? The answers differ by client and both are defensible. What is not defensible is not asking. And restrict upload…

In this module: Module 13 · Document Records

1. 1Document records and why access matters most
2. 2Document types and categories
3. 3Controlling access
4. 4Flexfields and contextual attributes
5. 5Generating letters
6. 6Retention, archiving and purging
7. 7What breaks
8. 8Lab: eight document types and an access matrix