How can we remove or restrict the access to all the financial attributes?

Document ID : KB000022559
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

We have new requirement to hide all financial information from our external (contractor) CA PPM users. We've been able to accommodate this request in most areas except for their ability to add financial fields such as Baseline Cost, ACWP, BCWS, etc. to either their project list or task list views. We can't solve the problem by restricting configuration of these views, because our others users need to have that ability.

Is there a way to prevent users from viewing certain project/task attributes on the project list or task list pages?

Alternatively, is there a way to disallow configuration of these views for only certain users?

Solution:

This can be accomplished by using display conditions on subpages and setting the 'Attribute Value Protection' (AVP) option on List Views.

There are attributes that display financial information on the Project Object and the sub-objects - Team, Task, Baseline and Assignment.
Create a Resource Security Group - No Financial Access.
It does not have to have any access rights assigned; it will only be used for display conditions on subpages.
Add the resources to this group.
Place these types of attributes on user-defined property sub-pages within the objects and set the display condition to only display if the end-user is NOT a member of the 'No Financial Access' group.
Go to the object List View [Options] page and set the Attribute Value Protection = 'Use display conditions and secured subpages to protect attribute values on this list'.

NOTE: Some pages do not have this option already set as noted above. If the List View [Options] page does not already have AVP set to this value, and there are end-users that currently have personalized the list view, the attribute values will NOT be protected and the end-user will be able to see the values in these attributes. To ensure that the attributes are properly secured, the System Administrator should use the 'Publish' feature on the Object Views to push out these changes to all end-users. This will reset all end-user personalized configurations on all the list views for that object.

Reference TEC1272884: How to Configure AVP Settings to Improve Performance