There are 3 factors that determine security
- Departments - This is a way to group your users.
- Roles - Users play different roles in different departments.
- 2 types of roles - User defined and System defined
- System defined - there are few roles that are pre-defined by Celoxis - eg. Project Manager, Project Team, Task Team, Project Client, Administrator, Staff.
- User defined - you have to define these based on the roles played in your organization
- Privileges - There are 3 kinds of privileges
- Grant
- Deny
- Unspecified.
After defining your Departments and Roles, you need to set the department to role combination of every user. Then for every Role, you setup the privileges that specify what actions are allowed for that role. For eg.. Add Project - Can anyone in your Org create a new project? If yes, you will Grant this permission to your role - Staff.
Security is applied based on a combination of WHAT ROLE a USER plays in WHICH DEPARTMENT (Every project in Celoxis has a department. And objects such as tasks, time, expense, documents and discussions are all attached to a project and hence a department.) Please click here to read more on how security works.