Question

Photo of S R

0

Security Help - Giving permission to everything but financial area

2
  • posted

I would like to give a few people on staff full access to Rock (like an admin), but I would like all the financial records to be hidden. Is there any easy way to do this?

  • Nick Airdo

    Nick Airdo

    Both of those answers below are acceptable solutions. Staci, do you prefer one over the other? If not you can just choose the first reply as the accepted one to give credit for the answer.

    • Photo of David Leigh

      1

      I think the easiest way to do this is:

      1. Create a new Security Group and add these people to the group.
      2. Give the new group View/Edit/Administrate access to "Internal Homepage", the top-level page of the internal site.
      3. Add a "Deny View" permission to the top-level "Finance" page for this group, making sure that it appears at the top of the permissions list for that page so that it takes precedence.over the permissions granted by other security roles.

      The Page Map (Home/CMS Configuration/Page Map) is a very useful tool for viewing authorisations - click the "Show Auth" button to reveal which groups have access to which pages.

       

    • Photo of Frank Grand

      0

      Staci,

      We have this exact need.  What we did was remove access to the finacial pages to Rock Admin security group.  So we have Rock Admin who do not have access to any of the financial pages.  So in our case a true "super admin" is in the security groups Rock Admin and Finance Admin groups.  Not sure if this is easier than David's solution, but for all intents and purposes it's the same idea and the answer to your question is YES!