Definition security in application designer

Definition security in application designer: (only for those objects which are maintained by PeopleTools of course e.g. PSWORKLIST table, WORKLIST page, etc.)

Important tables:

SELECT * FROM PSOBJGROUP
SELECT * FROM PSOPROBJ


In application designer>Click on Go in the Top menu and then select Definition Security



Note: This works only with Primary permission list



When you create a group, always add those definitions to the left which you want to restrict and rest all on the Exclude side.

When you create a group with only Fields on the left side and rest all the definitions on the right side and then attach it to a primary permission list with displayonly =true, then all the fields (only those which are maintained by PeopleTools of course) would be seen by the developer but they won't be editable.



The way it works:

Scenario 1:

Suppose you want your developer to see all the Activity definitions but don't want him to change anything:

Create an object group just for all the Activity definitions - GRP_ACT_1 and save.



Open the permission list with the Primary permission list attached to his user profile, say HCPPITA in the definition security window

Add GRP_ACT_1 from right-side into the left-side window and from the top menu make it display-only.





Scenario 2:

Suppose you want your developer not to see any of the Activity definitions and for all other object definitions he should have full access:

Create an object group just for all the Activity definitions - GRP_ACT_2 and save.

Create an object group for all the definitions except the Activity definitions - GRP_ACT_3 and save.



Open the permission list with the Primary permission list attached to his user profile, say HCPPITA in the definition security window

Add GRP_ACT_3 from right-side into the left-side window and from the top menu remove display-only flag.

Let GRP_ACT_2 be on the right-side to exclude the access completely.



Scenario 3:

A functional user should not have any access, even read access to any of the peopletools objects.

Open the permission list with the Primary permission list attached to his user profile, say HCPPITA in the definition security window

Don't add any of the groups on the left-side window