Ok, so your employee record will need to have a summary up to the Parent Organization. I would use your current field [This is Me] for this. Then you will need to do a Lookup field from the Vendor Organization to the Customer Organization of the [This is Me] Summary field you just created.
Your permissions will need to look at both of these fields to determine if the user can access the record, so that would be something like:
[Vendor - # of Me] >0 OR [Customer - # of Me]>0
You could also create a Formula Checkbox ([Can View]) on the Organizations table that uses this same formula and then just use the [Can View] checkbox in your custom permissions.
------------------------------
Blake Harrison
bharrison@datablender.ioDataBlender - Quick Base Solution Provider
Atlanta GA
404.800.1702 /
http://datablender.io/------------------------------
Original Message:
Sent: 01-07-2021 13:58
From: Surya V Avantsa
Subject: Roles and permissions
------------------------------
Surya V Avantsa
Original Message:
Sent: 01-07-2021 13:31
From: Blake Harrison
Subject: Roles and permissions
Can you post a mockup of your relationships? I'm a bit confused on your setup.
------------------------------
Blake Harrison
bharrison@datablender.io
DataBlender - Quick Base Solution Provider
Atlanta GA
404.800.1702 / http://datablender.io/
Original Message:
Sent: 01-07-2021 10:54
From: Surya V Avantsa
Subject: Roles and permissions
Folks,
I have a permissions question. My use case is as follows:
Organizations have Organizations. The parent organization is a Vendor and the child organization is their customers. Organizations have departments and departments have employees. I want those who are in the HR role to be able to view their Parent organizations (Vendor) and the customer organizations. They should not be able to view other organizations or their customers.
Each person in the HR role is an employee in their respective "Vendor" organization. (Organization table has a type field: Vendor or Customer) The Employee table has an email address as the primary key and a formula user field based on that email address.
Now, I have a formula field "This is Me" to be true when the current user is the User field on that employee record. Then I have a summary field "# of Employees Who is Me", on the "department has employees" relationship that is defined as the count of the rows where "This is Me" is checked. This rolls up to the Organizations table on the Organization has Department relationship as "# of My Departments".
To control the view of the organizations that are the customers of my vendor organization, I have Orgs has Orgs relationship where the reference field is the Vendor Organization. To be able to decide which Customer organizations an employee can view, I have pulled down the "# of my Departments" as a lookup on this relationship so the Organization table how has "Vendor Organization - # of My Departments"
Now, to set the permissions of what organizations an HR role person can view, I have set it up as "# of My Departments" > 0 or "Vendor Organization - # of My Departments" > 0.
The issue is: When I test as one of the Employees of an organization who is in the HR role, I can see my Vendor organization but not its Customers Organizations (which are the child records of the Organizations table)
What am I doing wrong? Or how else can I accomplish this?
------------------------------
Surya V Avantsa
------------------------------