Clarity: Idea - Initiator (Auto) Instance Right versus Idea - Manager (Auto) Instance Right

Document ID : KB000051707
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

It appears that an end-user with the ability to create Ideas does not have the ability to 'manage' the idea. User has limited access to some Idea attributes and subpages. Is this expected behavior?

Steps to Reproduce:

Login as a Clarity Administrator

  1. Admin Tool > Resources > click 'New' button.

  2. Create 'Resource1' as an Idea Initiator/Creator with the following Global Right:

    Ideas - Create : Allows user to create Ideas. Includes the Ideas - Navigate right.

    (Navigate right allows user to navigate to Ideas pages. User will need additional rights to view individual Ideas.)

  3. Create 'Resource2' as an Idea Manager with the following Global Right:

    Ideas - Navigate : Allows user to navigate to Ideas pages. User will need additional rights to view individual Ideas.

Login as 'Resource1'

  1. Main Application > Ideas > click 'New' button.

  2. Fill out required fields ; do not enter a Manager name.

  3. Click 'Save' button.

  4. Observe the following:

    1. 'Required' attribute is not shown.

    2. 'Target Manger' attribute is not shown.

    3. 'Schedule' subpage link is not shown.

    4. 'Budget' subpage link is not shown.

Login as Clarity Administrator

  1. Main Application > Ideas > open the Idea created above for editing.

  2. Add 'Resource2' as the 'Manager'.

  3. Click 'Save' button.

  4. Admin Tool > Resources > click 'Resource1' > Instance Rights.

    Because 'Resource1' created the Idea, the instance right 'Idea - Initiator (Auto)' is granted.

  5. Admin Tool > Resources > click 'Resource2' > Instance Rights.

    Because 'Resource2' is added as the Idea Manager, the instance right 'Idea - Manager (Auto)' is granted.

Login as 'Resource2'

  1. Main Application > Ideas > open the Idea created above for editing.

  2. Observe the following:

    1. 'Required' attribute is shown.

    2. 'Target Manager' attribute is shown.

    3. 'Schedule' subpage link is shown.

    4. 'Budget' subpage link is shown.

Solution:

Clarity security is used to expose areas of functionality to end-users. The Idea Initiator role will be granted access only to a subset of the full Idea investment. A user who is granted only the 'Ideas - Create' rights will not be permitted to access the 'Required' attribute, the 'Target Manager' attribute and not permitted to access the Budget and Schedule sub-pages nor any of the tabs Team, Hierarchy, and Process. Access to these require additional rights.

Keywords: CLARITYKB, pma, ideaList, ideaProperties, nmc, userInstanceRights, userGlobalAssoc, pma_ideas, inv_ideas, initiator_id, initiatorUserName.