Hello, I think Manager’s User Permission and Restriction system is one of the best allowing multiple level of access and restriction for the user. I am just facing one issue particularly. It is so hard to create custom level access to users. I run 3 organizations which all has more than one person who needs to access specific parts of Manager. Below is a breakdown
Administrator (Someone who can access everything about the business which includes adding new users and permissions)
An Accountant (They can access everything in the system, except being able to change the business details, eg address and so on)
Sub Accountants (They can access only expenses, income and accounts in their respective branch/location)
Executives (They can access and create reports as per their needs)
Imagine, in Manager i have to do all this manually, for each business and for each user. It’s very tedious and hard to achieve this. Is it a feature that developers are considering to introduce in future updates? Here is how this problem could be solved.
Introducing Sub accounts (Sub-User Accounts) who will have access to only the businesses that main account has access to. So i dont need to start choosing which business they get access to.
Introducing Access Group Settings (To setup access settings and then apply that to users or sub users I create. So currently there is Administrator and Restricted User - We could Have Accountant User, Sub Accountant, Etc etc depending on how I set them up in the main settings)
These are just thoughts however for optimization and better performance developers could have a better opinion @lubos
By the way I am trying out for the Server Edition, i just installed it on my server.
NB: My biggest problem is i need to disable fewer things than enable. But i have to spend 30 minutes having to enable one feature after another with every user that i want to restrict with. And just leave out two features i want to disable.
@mraniweneonline, I completely agree that this is a chore. Something could be done to make administrator lives easier.
However, the solutions you suggest – while definitely valid – introduce a lot of complexity, which goes against the design principles of Manager. Specifically, this one:
On the other hand, this looks like a good starting place for improvements:
The way I understood it, you want preset User Roles which are editable by admins.
I have a couple of questions though:
When you said “how I set them up in the main settings”, you were referring to Business specific settings. This implies that each Business will have it’s own set of user roles? Or maybe you meant global roles editable from a special Users settings menu.
I assume these Roles shouldn’t be set in stone, for example a single accountant could have special permissions or have certain permissions denied, right? In that case, these user roles could serve as a template that prefills the User Permissions setting menu, or did you mean dynamic role, meaning that you could edit the role and all related user permissions will be affected? This could potentially pose problems.
Would a Copy To button be of any help? - Yes, Yes, Yes. This button, which already exists in invoices, receipts etc, allowing us to copy details would be very helpful. This way, I can create one user-permission (role) and copy it to the next user.
NB: The challenge here however is that user-permission are created at the Business Level. Which means i would have to re-create User-Role-Templates for each business. So the best fix would be in the Main Menu We have Business & Users (We can add Roles) So it can be an independent thing then roles can be created and applied both upon users and upon business level.
Eg,
Role A (Full access except editing business details)
Role B (Full access except editing business, and editing employees)
So UserA is given access to BusinessA and BusinessB, in BusinessA - RoleA, in BusinessB - RoleB
This can help when you have someone who is working as an accountant in one branch and as a sub-accountant in the main branch HQ
I didnt understand the other questions very well. But I hope i have clarified more here to have answered those questions as well. The biggest problem is how tough it is to create custom user permissions. There are just too many options, it would be great to create templates once, and use them accross different businesses (so GLobal role templates) then we can go in and assign a specific user permission inside the business that is fine. you just click the respective role-template to use.