Siebel Security Guide > Configuring Access Control >

About Configuring Drilldown Visibility

You can control access to data by configuring the visibility to drilldown views. Drilldown visibility can occur within the same business object or between different business objects. The following sections provide more details on each scenario.

Drilldown Visibility Within the Same Business Object

If the original view and drilldown view are both based on the same business object, and visibility is unspecified in the drilldown view, then whatever visibility is in effect in the original view is continued in the drilldown view.

If the drilldown view of a drilldown object has a different Visibility Applet Type setting from the original view, then drilling down on a record takes the user to the first visible record of the destination view. It does not to the drilldown record.

Drilldown Visibility Between Different Business Objects

If the original view and drilldown view are based on different business objects, then moving from the original view to the drilldown view might require that you configure visibility in the drilldown view to something other than its standard setting.

If you have to configure visibility in the drilldown view, then note that two types of drilldown object exist:

• ID-based drilldown object
• Bookmark-based drilldown object

The drilldown object is ID-based when it has values specified for the Business Component and Source Field properties. Otherwise, it is a bookmark-based drilldown object.

The visibility rules in the drilldown view are the same for the two types of drilldown object, with the following exception; for an ID-based drilldown, setting the Visibility Type property of an applet's drilldown object overrides the Visibility Applet Type setting of the drilldown view. For example, assume you configure a drilldown object with a visibility type of All. It overrides other visibility types (for example, Sales Rep visibility) on the drilldown view when the user drills down.

The Visibility Type property in a drilldown object only overrides the drilldown view Visibility Applet Type property once, that is, when you drill down. If you navigate to another view in the screen and then return to the drilldown view, then the original visibility of the drilldown view is applied. The visibility is refreshed every time you navigate to a different view in the same screen after drilling down.

For example, assume that you navigate to a view with personal access control in the same screen after drilling down; the drilldown record is no longer visible. If you then navigate back to your original drilldown view (with Sales Rep visibility), then the drilldown record remains invisible. If you navigate to a third view with All visibility, then you can see your drilldown record again.

Visibility Rules for the Drilldown Object Type

If the drilldown view is a detail view that does not have visibility specified and the drilldown object does not have visibility specified, then visibility on the drilldown view's screen applies in the following order:

• All
• Organization
• Manager
• Sales Rep

The above scenario assumes that the business component is configured for visibility.

NOTE:  You can only specify visibility on an ID-based drilldown object. For more information about the Drilldown object type, see Siebel Object Types Reference.

Visibility Rules for the Link Object Type

After you drill down to another screen, the thread bar is updated. The current view displays its records using a master-detail relationship, based on the value of the link property Visibility Rule Applied in the original view (before the drilldown).

If Visibility Rule Applied is set to Never, then no additional visibility rules apply. The thread context's master-detail relationship determines the records visible in the view, regardless of the visibility setting for the current view. If you change the view using the link bar, then the thread context is retained. Records might be displayed that normally (without the thread context) are not visible in this new view.

If Visibility Rule Applied is set to Always, then additional visibility rules apply. The Siebel application might display an error message when a user performs a drilldown to notify the user that he or she does have the appropriate privileges to see the detail records. For more information about the Link object type, see Siebel Object Types Reference.

Example of Visibility in a Drilldown Between Different Business Objects

The following example illustrates how the visibility rules described above apply when a user drills down from the Opportunity business object to the Quote business object. In the Opportunity Quote View, a user drills down on the Name field of an entry in the Opportunity Quote List Applet to the Quote Detail View. In the screen (Quotes Screen) of Quote Detail View, the visibility type of all views accessible by the user are checked. Visibility is applied in the following order:

• If an accessible view has visibility equal to All, then this visibility applies after the user drills down to Quote Detail View.
• If an accessible view has visibility equal to Organization, then this visibility applies after the user drills down to Quote Detail View.
• If the user's position equals Manager and an accessible view has visibility equal to Manager, then Manager visibility applies after the user drills down to Quote Detail View.
• If an accessible view has visibility equal to Sales Rep or Personal, then this visibility applies after the user drills down to Quote Detail View.

An error message appears if the user does not have the appropriate visibility to view the record in the Quote Detail view.