Restrict Management of Document Records

You can restrict the creation, update, and deletion of document records post approval for a document type. By default, the preferences for document records aren't restricted. To access the document record preferences, use the Document Types task in the Setup and Maintenance work area.

These are the restrict options:

• Restrict Create: By default, No is selected. You can restrict document records for the document type from being created by selecting Yes.
• Restrict Update: By default, No is selected. You can restrict document records for the document type from being updated by selecting Yes.
• Restrict Delete: By default, No is selected. You can restrict document records for the document type from being deleted by selecting Yes.

The following table describes the different combinations that you can select for the document record preferences.

Restrict Create	Restrict Update	Restrict Delete
No	No	No
No	No	Yes
No	Yes	Yes (option disabled)
Yes	Yes (option disabled)	Yes (option disabled)

When you click Yes for the Restrict Create option, the application automatically selects Yes for the Restrict Update and Restrict Delete options. Additionally, the Restrict Update and Restrict Delete options are disabled. When you click Yes for the Restrict Update option, the application automatically selects Yes for the Restrict Delete option. Additionally, the Restrict Delete option is disabled and the Edit and Delete buttons are not visible when accessing a document record of the document type. When you click Yes for the Restrict Delete option, the Delete button is not visible when accessing a document record of the document type.

Note: Here are some points to be considered:

• The process of creating document records through journey tasks is secured with the Manage Person Documentation by Worker privilege.
• If you've associated document types with your journey tasks, you must include the document types in the Document Type Security Profile of the journey task performer.
• You must not configure the Restrict Create option to Yes for document types that are associated with journey tasks.
• You must not enable Approvals for document types that are associated with journey tasks.

Exclude Roles from Restriction

You can enter specific roles that you want to exclude in the Roles Excluded from Restriction field even if the following restrict options are enabled for the document type:

• Restrict Create
• Restrict Update
• Restrict Delete

For example, you may need to exclude certain roles for business reasons while restricting all other roles in the organization.

These examples explain how the role exclusion works:

• You have enabled the Restrict Create option for a document type and have excluded certain roles from the restriction. In this case, users having these excluded roles can still create a document record when they select the document type in the Add Document Record page.
• You have enabled the Restrict Update option for a document type and have excluded certain roles from the restriction. In this case, the Edit button will still be enabled for users having these excluded roles when they view the document record.
• You have enabled the Restrict Delete option for a document type and have excluded certain roles from the restriction. In this case, the Delete button will still be enabled for users having these excluded roles when they view the document record.
• John has two roles, employee and HR specialist. Sandra has only the employee role. You have enabled the Restrict Update option to Yes for the Visa document type and have excluded the HR specialist role for the same option. With this configuration, Sandra can’t edit the Visa document record. However, John can since he has the HR specialist role which is excluded from the Restrict Update option.

Here are some points to consider while excluding roles using the Roles Excluded from Restriction field:

• The field has a character limit of 4000 characters (including commas).
• You need to enter the role codes (for example, ORA_PER_HUMAN_RESOURCE_SPECIALIST), and not role titles, in the field. If there is more than one role, separate them using commas. Ensure that you don't include a space after the commas.
• By default, the value for the field is null.
• The field will be enabled only when the restrict option is set to Yes.
• A document type LOV displays document types based on your document type security profile:
  • When Restrict Create option is enabled but no roles are specified in the Roles Excluded from Restriction list, you’ll not receive an error message, and the LOV won’t display the document types.
  • When Restrict Create option is enabled but roles are specified in the Roles Excluded from Restriction list, you’ll receive an error message if your role is not included in the Roles Excluded from Restriction list.
• You can export and import the document type exclusion configuration by using Functional Setup Manager (FSM). The configuration supports HCM Data Loader and HCM Spreadsheet Data Loader.
• If you have made changes to the add, edit, and delete buttons using page composer, it is recommended that you evaluate the changes and use the role exclusion configuration option wherever applicable.