Employees authorized to add and edit employees global config parameter

Hello Experts,


I have attempted to customize a global config parameter in Web Designer for 'Employees authorized to add and edit employees', by default it is an empty string and I have set it to a simple query:

"uid_person in (select UID_Person
                from person
                where Lower(CustomProperty09) = 'staff' Or Lower(CustomProperty09) = 'faculty')"

based on my requirement where any employee in the organization should be able to request to create an account through Web Portal.

However, my custom query doesn't seem to have any effect, even if I just limit it to one specific person and limit it by PersonnelNumber. It seems to have some kind of hard coded behavior to where as long as logged in person is either a manager or department manager they can add user accounts.

My question is has anyone figured out a way to change it, do I need to modify something else in conjunction with a query I am already modifying. I am just confused what is the purpose of this config parameter if it is truly a hard coded behavior in Web Designer?

Thanks,

Sergei Shvets

Parents
  • Hi all
    I know this thread is pretty old, but some question last like diamonds: forever!
    I need to achieve something similar what is described here.
    I need to grand edit permission of an employee marked as external (Person.IsExternal = 1) to
      1 his manager (Person.UID_PersonHead)
      2 the Manager of his manager’s department (Person.UID_PersonHead.UID_Department.UID_PersonHead)

    Let me explain: let’s say I have an employee: “Mr. Emp.” He belongs to the department “Externals”.
    “Mr. Emp.” also has a manager: “Direct Manager”. “Direct Manager” belongs to the department “Internal” and the department “Internal” has a manager “SuperManager”.
    I need both “SuperManager” and “Direct Manager” to be able to edit “Mr. Emp.” Data.
    I have tried every combination of configuration, but:
      • or I cannot limit the edit permission of “SuperManager” to “Mr. Emp.” (he will be able to edit all person” (I got this adding the App Role “Identity management/Employees/Administrators”)
      • nor I cannot grant anything to anyone if I simply "play" with the global configuration queries.
    Anhy idea that could help??
    Thanks in advance
    Alberto

Reply
  • Hi all
    I know this thread is pretty old, but some question last like diamonds: forever!
    I need to achieve something similar what is described here.
    I need to grand edit permission of an employee marked as external (Person.IsExternal = 1) to
      1 his manager (Person.UID_PersonHead)
      2 the Manager of his manager’s department (Person.UID_PersonHead.UID_Department.UID_PersonHead)

    Let me explain: let’s say I have an employee: “Mr. Emp.” He belongs to the department “Externals”.
    “Mr. Emp.” also has a manager: “Direct Manager”. “Direct Manager” belongs to the department “Internal” and the department “Internal” has a manager “SuperManager”.
    I need both “SuperManager” and “Direct Manager” to be able to edit “Mr. Emp.” Data.
    I have tried every combination of configuration, but:
      • or I cannot limit the edit permission of “SuperManager” to “Mr. Emp.” (he will be able to edit all person” (I got this adding the App Role “Identity management/Employees/Administrators”)
      • nor I cannot grant anything to anyone if I simply "play" with the global configuration queries.
    Anhy idea that could help??
    Thanks in advance
    Alberto

Children
No Data