About Runtime Prompts and Approvals Security

Service Administrators can design runtime prompts to honor Approvals security for members. Doing so prevents users from changing data in approval units to which they don't have access, according to Approvals rules. For example, the Service Administrator may not want users to change data after they have promoted the related approval unit. In Calculation Manager, Service Administrators can set runtime Security for a member or members:

  • Approvals: The application allows a user to change member data if both these conditions are true:

    • The user has write access to the members (as assigned in the application).

    • If the members belong to an approval unit, the user owns the approval unit.

      If both conditions are not met, the user can't change the members' data.

  • Write: Users launching the business rule who have write access to the members (as assigned in the application) can change its data. The members' Approvals status is ignored.

  • Read: Users launching the business rule have read access to the members (as assigned in the application). Approvals status is ignored.

  • Use Default: Security is applied to the runtime prompt only if member access isn't set to None (that is, either read or write).

See Designing Secure Runtime Prompts.