Employees authorized to add and edit employees global config parameter

Hello Experts,


I have attempted to customize a global config parameter in Web Designer for 'Employees authorized to add and edit employees', by default it is an empty string and I have set it to a simple query:

"uid_person in (select UID_Person
                from person
                where Lower(CustomProperty09) = 'staff' Or Lower(CustomProperty09) = 'faculty')"

based on my requirement where any employee in the organization should be able to request to create an account through Web Portal.

However, my custom query doesn't seem to have any effect, even if I just limit it to one specific person and limit it by PersonnelNumber. It seems to have some kind of hard coded behavior to where as long as logged in person is either a manager or department manager they can add user accounts.

My question is has anyone figured out a way to change it, do I need to modify something else in conjunction with a query I am already modifying. I am just confused what is the purpose of this config parameter if it is truly a hard coded behavior in Web Designer?

Thanks,

Sergei Shvets

  • I would have thought what you have is right.

    Here's an idea - get to the new user creation page in web designer and see which module it belongs to, maybe it has a configuration param which is different to this one which also needs to be changed?

  • I had the same problem but for 'Employees which can be edited by the current user'. No matter what I did, when I did the preview it would still show the default results. What I winded up doing was I made a copy of the VI_Employee_OverView and created a new key (filter) to replace the OOTB filter and that worked. Not sure if this is a bug or there is something else overriding that filter, but it drove me crazy for a couple days.


    HTH

  • Thank you for your replies. Adding of new employee belongs to VI_Employee_Overview which I wouldn't think I would need to copy since I have already made a custom web project. But I have copied it and found the

  • Sorry didn't mean to hit post just yet, I have created a copy of VI_Employee_Overview and found under Configuration -> Employees -> VI_Employee_Person_ManagerCondition which seems to be what I need, but I am not seeing where I can enter my query, sorry I am really bad in Web Designer, do you remember by chance where exactly you had to go to modify the query in that module?


    Also, just to note, I have a custom query for employees that can be edited parameter as well, and that one seems to be working.

    Thanks,

    Sergei Shvets

  • Sergei,

    What I did was add a new configuration parameter on the custom Employee_Overview I created and named it "Prefix_Employee_Filter". Then on the custom tab of the Employee_Overview add a Configuration Entry (right click on Configurator tree) and name the filter the same. Compile the project, and then go to Edit==>Configure project and look for your newly created filter and put your query there.

    I am not sure if this will solve your problem, but it did for me.

    Hopefully this works.

  • It didn't work, but after playing with it for a while I think I figured out that the query config parameter actually worked from the start. I might be wrong, but I think the query config parameter is only responsible for showing 'People' tab in Web Portal and has nothing to do for enabling a button 'Add a new employee'. After looking at the properties of the button itself I am seeing a property called 'Active' and it has a function --- caninsert("person"), I think that is what determines whether the button is active or not which is essentially whether you can start the form for new user creation. Haven't figured out where it is defined or how to change it but I think that's what needs to be modified.

    Thanks,

    Sergei Shvets

  • First check what Application roles You have assigned to user. To edit users he needs . Add him to Application role:

    Identity management/Employees/Administrators

    This will enable him to edit users.

    Second set 'Employees authorized to add and edit employees' to value:   1=1 just to see if you see any users and try to edit some of them.

    Lastly try this with your condition.

    ...but by default only managers can edit their employees!

  • I have tried changing my query to 1=1 just to eliminate any sql mistakes, I haven't added anyone to that application role, I will try adding an account manually just to see if that will resolve the issue, but users that are managers or department managers don't have that role either and they are able to add and edit employees. Also, to note, there is no issue with editing users, if I assign an account to an employee they are able to edit it with no issue and button to 'Add Employees' becomes active in Web Portal. The problem is users that are not managers need to be able to add contractor accounts and no matter what I do to the query button to 'Add Employees' stays inactive until a user becomes a manager.


    Thanks,

    Sergei Shvets

  • Hi all
    I know this thread is pretty old, but some question last like diamonds: forever!
    I need to achieve something similar what is described here.
    I need to grand edit permission of an employee marked as external (Person.IsExternal = 1) to
      1 his manager (Person.UID_PersonHead)
      2 the Manager of his manager’s department (Person.UID_PersonHead.UID_Department.UID_PersonHead)

    Let me explain: let’s say I have an employee: “Mr. Emp.” He belongs to the department “Externals”.
    “Mr. Emp.” also has a manager: “Direct Manager”. “Direct Manager” belongs to the department “Internal” and the department “Internal” has a manager “SuperManager”.
    I need both “SuperManager” and “Direct Manager” to be able to edit “Mr. Emp.” Data.
    I have tried every combination of configuration, but:
      • or I cannot limit the edit permission of “SuperManager” to “Mr. Emp.” (he will be able to edit all person” (I got this adding the App Role “Identity management/Employees/Administrators”)
      • nor I cannot grant anything to anyone if I simply "play" with the global configuration queries.
    Anhy idea that could help??
    Thanks in advance
    Alberto