# Role Concept

## Key Features

| Users must have manager privileges in order to be able to execute functions within the role concept.
| Implementing access rules Verification of standard manipulation functions Implementation of the customization Restricting access of user functions Defining configuration parameters Creating roles Applying role properties Defining privileges Defining privileges checked in masks Assigning privileges to a role Creating LogiView procedures: Displaying error messages that may occur when standard items are copied Restricting a job function Verifying the privileges of a user
| After creating or changing Roles, Job Functions or Privileges in the Role Model the Permission Manager requires the data: Select Reload from the context menu!
| #### Implementing access rules
| Access rules verify the access privileges of the current user according to specific criteria. All access rules are implemented with LogiView.
| #### Verification of standard manipulation functions
| Basic user functions for records such as Create, Modify, Delete, etc. can be checked by means of mask entries.
| #### Implementation of the customization
| The customizing process involves creating object instances, implementation of access rules, and assignment of masks/selections/fields, tasks, and access rules as well as userexits and their parameters.
| #### Restricting access of user functions
| The protection of selections, fields, masks, and menus against unauthorized access is performed using a general userexit, whose parameter points to a central task table.
| #### Defining configuration parameters
| The implementation of the role concept, the description of privileges, and the license management algorithm are controlled by way of configuration parameters.
| #### Creating roles
| All roles are created in the User Management. As part of the creation process you can also apply privileges and licenses.
| #### Applying role properties
| The properties of a role can be applied in the user management. Properties include licenses, privileges, etc.
| #### Defining privileges
| Privileges and the corresponding access rights are to be defined in the User Management.
| #### Defining mask privileges
| The definition of privileges and the corresponding mask modes is carried out in the User Management.
| #### Assigning privileges to a role
| In the User Management, individual privileges can be assigned to specific roles. Job functions can be limited in time or restricted to specific departments of the company.
| #### LogiView Procedures
| Use LogiView procedures to define the following functions:
| #### Displaying error messages that may occur when copying standard items
| Use the CUS_TASK/ItemCopy LogiView procedure to generate an error message whenever a user - who is not part of the STANDARD group - tries to copy standard parts.
| #### Restricting job functions
| In this example, you will create a LogiView procedure DocumentUpdate that restricts the job function of a user to documents which are either project-independent or assigned to the FastViper project.
| #### Verifying the privileges of a user
| Call the xtask_chk (privilege) userexit to verify if the current user has a specific privilege.