When a user does not have Create/Update Access,
- three should be no “Edit” button visible to the user in the
transaction modules. If a button is required, then it’s label
should read, “view”, and the update/delete buttons should be hidden
from the user (along with the message that the feature has been
disabled). - The Create New buttons should be hidden from the user. In the current view, the user can click on the button fill out the form, only to realize that the Administrator has disabled the Create button.
When access is restricted, don’t give the user more information/buttons than they are authorized to have
This also applies to the top navigation screens for “Users” “Preferences” and “Billing” - the user should not have these menu options if it is only available to the administrator (or restricted from their ability to edit).
Or enable the Administrator to determine what buttons are available in the Top Navigation, similar to the ability to customize other navigation settings.