Default Customer role

Eugene Kuchynski — Fri, 23 Apr 2021 08:45:20 GMT

Current Revision posted to Wiki by Eugene Kuchynski on 4/23/2021 8:45:20 AM

In addition to Admin and User default roles, SDL Trados Business Manager has a predefined role called Customer.

This role should be assigned to all user accounts created for customer who will be able to access portal for customers. In addition to a role, Associated customer field must be filled for such users. By default, Customer role allows customers to:

Change own password for accessing a portal
View and edit own profile
Create quote requests, create new projects and jobs, with possibility to upload files and provide additional instructions
View ongoing and past quotes, translation projects and jobs, including pricing and volumes information
View invoices issued by a user and status of their payment
View number of QuickReports to assess cooperation with a user

You are fully free to change default permissions defined in the Customer role. However, if you unintentionally remove permissions which are mandatory for correct working of a customer's portal, then application will automatically return these permissions after clicking Save button in the role editing window.

Below you will find explanation of every permission setting in the Customer role.

Type permissions

While navigation permissions control contents of the navigation tree and do not control access right to actual data, type permissions serve exactly for this - to define a data allowed/denied to be read, written, created or deleted by users with this role. By default access to all data is denied in the Customer role.

This means that even if navigation permission allows to open translation project list, attempt to do this will lead to fully empty list of projects, because it is not allowed to read (nor write, create and delete) data. So, the task of Type permissions table is to define what is allowed to read/write/create/delete. In this list you can see what is allowed by default in the Customer role:

Type	Read	Write	Create	Delete	Member permissions	Object permissions	Notes
User	Allow				Change password on first logon Criteria: [Oid] = CurrentUserId() Allow write Stored password Criteria: [Oid] = CurrentUserId() Allow write	x	Needed to allow user to change own password Read permission for all users is needed to determine users for sending notifications
Application setting	Allow	Allow					Write permission for application settings - internal temporary data is stored in this table
Country	Allow
Currency	Allow
Customer						[Id] = CurrentUserVendorOrClientId() Allow Read and Write	Access to own customer profile
Dashboard						[Title] = 'Vendor performance' Allow read	Allows to view only one QuickReport named 'Vendor performance'
File attachment	Allow	Allow	Allow	Deny			To deliver files and invoices
File data	Allow	Allow	Allow	Deny			Linked with File attachment table
File type	Allow						Allows to view file types
Fuzzy type Fuzzy scheme Fuzzy scheme detail	Allow						Allows to read information from fuzzy schemes
Invoice Invoice item			Allow			[Customer.Id] = CurrentUserVendorOrClientId() [Invoice.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Allows to create invoices with own vendor value.
Language	Allow	Allow
Language pair	Allow	Allow
Model difference Model difference aspect	Allow	Allow	Allow				Used to store individual user settings (column in tables, etc.)
Notification	Allow	Allow	Allow	Allow			Needed to send notifications to users
Payment Payment details						[Customer.Id] = CurrentUserVendorOrClientId() [Payment.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Allows to view own payments
Price-list	Allow	Allow					Allows to read own price-list. Write permission allows to make changes in background, editing in UI is prohibited.
Quote Quote item			Allow			[Customer.Id] = CurrentUserVendorOrClientId() [Quote.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Access to own quotes
Report	Allow						Needed for viewing reports
Scheduler	Allow	Allow	Allow	Allow			Allows to create entries in the calendar in background when new jobs are created
Settings	Allow						Read application settings
Software application	Allow
Specialization Specialization category	Allow						Read reference data
Tax	Allow
Translation job Translation job task Translation job receivable						[Customer.Id] = CurrentUserVendorOrClientId() [Translation job.Customer.Id] = CurrentUserVendorOrClientId() Allow read and write	Allows to view translation jobs which belong to a customer
Translation project			Allow			[Customer.Id] = CurrentUserVendorOrClientId() Allow read and write	Allows to view and create translation projects which belong to a customer
Translation job task					Fuzzy type; Unit; Work type		Needed to allow to view fuzzy type, unit and work type in assignments, because tasks in assignments are based on job tasks
Unit	Allow						Read reference data
Work type	Allow						Read reference data

* Empty cell means 'Deny'

As you see, two functions were used in the Object permissions column: CurrentUserVendorOrClientId() and CurrentUserId(). Description of these functions can be found in the Default Vendor role article.

Tags: System, Roles, portal, customers, Security

Default Customer role

Eugene Kuchynski — Wed, 16 Oct 2019 10:11:52 GMT

Revision 1 posted to Wiki by Eugene Kuchynski on 10/16/2019 10:11:52 AM

In addition to Admin and User default roles, SDL Trados Business Manager has a predefined role called Customer.

Change own password for accessing a portal
View and edit own profile
Create quote requests, create new projects and jobs, with possibility to upload files and provide additional instructions
View ongoing and past quotes, translation projects and jobs, including pricing and volumes information
View invoices issued by a user and status of their payment
View number of QuickReports to assess cooperation with a user

Below you will find explanation of every permission setting in the Customer role.

Navigation permissions

Translation assignments	Allows to view all assignments. Special limited list of assignment will be opened with buttons to deliver files.
My details	Allows to view user's form which allows to change password for a vendor's user.
QuickReports	View list of available reports (allowed by security system)
Credit notes	View list of credit notes issued by a user
Customer's dashboard	Dashboard showing ongoing quotes, projects and jobs on a single screen, as well as few charts
Invoices	View all invoices issued for a customer, along with their status of payment
Payments	View all payments registered by a user for a customer
Quotes	View all quotes (available for acceptance and past quotes) and create quote requests
Translation jobs	View and create translation jobs (tasks with single language pair)
Translation projects	View and create translation projects (multiple language pairs)

This means that navigation tree on the left will contain only 2 links: to open translation assignments and my details.

Type permissions

Type	Read	Write	Create	Delete	Member permissions	Object permissions	Notes
User	Allow				Change password on first logon Criteria: [Oid] = CurrentUserId() Allow write Stored password Criteria: [Oid] = CurrentUserId() Allow write	x	Needed to allow user to change own password Read permission for all users is needed to determine users for sending notifications
Application setting	Allow	Allow					Write permission for application settings - internal temporary data is stored in this table
Country	Allow
Currency	Allow
Customer						[Id] = CurrentUserVendorOrClientId() Allow Read and Write	Access to own customer profile
Dashboard						[Title] = 'Vendor performance' Allow read	Allows to view only one QuickReport named 'Vendor performance'
File attachment	Allow	Allow	Allow	Deny			To deliver files and invoices
File data	Allow	Allow	Allow	Deny			Linked with File attachment table
File type	Allow						Allows to view file types
Fuzzy type Fuzzy type kit Fuzzy type kit detail	Allow						Allows to read information from fuzzy schemes
Invoice Invoice item			Allow			[Customer.Id] = CurrentUserVendorOrClientId() [Invoice.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Allows to create invoices with own vendor value.
Language	Allow	Allow
Language pair	Allow	Allow
Model difference Model difference aspect	Allow	Allow	Allow				Used to store individual user settings (column in tables, etc.)
Notification	Allow	Allow	Allow	Allow			Needed to send notifications to users
Payment Payment details						[Customer.Id] = CurrentUserVendorOrClientId() [Payment.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Allows to view own payments
Price-list	Allow	Allow					Allows to read own price-list. Write permission allows to make changes in background, editing in UI is prohibited.
Quote Quote item			Allow			[Customer.Id] = CurrentUserVendorOrClientId() [Quote.Customer.Id] = CurrentUserVendorOrClientId() Allow Read and Write	Access to own quotes
Report	Allow						Needed for viewing reports
Scheduler	Allow	Allow	Allow	Allow			Allows to create entries in the calendar in background when new jobs are created
Settings	Allow						Read application settings
Software application	Allow
Specialization Specialization category	Allow						Read reference data
Tax	Allow
Translation job Translation job task Translation job receivable						[Customer.Id] = CurrentUserVendorOrClientId() [Translation job.Customer.Id] = CurrentUserVendorOrClientId() Allow read and write	Allows to view translation jobs which belong to a customer
Translation project			Allow			[Customer.Id] = CurrentUserVendorOrClientId() Allow read and write	Allows to view and create translation projects which belong to a customer
Translation job task					Fuzzy type; Unit; Work type		Needed to allow to view fuzzy type, unit and work type in assignments, because tasks in assignments are based on job tasks
Unit	Allow						Read reference data
Work type	Allow						Read reference data

* Empty cell means 'Deny'

Tags: System, Roles, portal, customers, Security