Translate
Sometimes it is needed to configure a role in a way that allows users to create particular entities, but denies to edit or delete them after creation.
To achieve this, do the following:
- Open a role and switch to Type permissions tab.
- Add a new row and select Target type.
- Set Read and Create permissions to Allow, and Write and Delete permissions to Deny.
- Double click on this row to open its editing form.
- Switch to Object permissions tab and add a new row.
- Set Write permission to Allow, and type the following in the Criteria:
IsNewObject([This]) = True
This means that write is denied in general, but allowed when current object is new. - Save a role, assign it to some user and test how it works.