Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Section


Column

The Access Control feature offers the frevvo designer increased flexibility when assigning access to forms/workflows and form/workflow submissions. Runtime access can be assigned to specific users/roles as long as they exist in your tenant. Also, the Access Control feature enables the designer to use templates to define user and role lists to dynamically control access.

Designer users can give permission to edit forms/workflows and monitor submissions to other users by adding them to the Who can edit the form/workflow dropdown. 

Note

Tenant admins will continue to have full access to all capabilities and will not be subject to Access Control List (ACL) checks.



Column
width400px

On This Page:

Table of Contents
maxLevel2


...

Excerpt

Access Control List User Interface

Tip
  • frevvo users assigned the frevvo.publisher role have the ability to assign/change visibility/ACL permissions. Refer to Access Control List for Publisher Users for a discussion of the UI the Publisher user will see.
  • Although designer users can click the Security icon from the Action Menu on the Forms and Workflows Home page, we encourage you to use the Form/Workflow Settings wizard explained below to assign permissions.

Open the Access Control wizard by

  • Editing the form/workflow.
  • Go to Settings mode.
  • Click the Access Control tab.


Form designers as well as users with the publisher role are authorized to configure access control. The Access Control wizard makes the following permissions available for forms/workflows:

  • Who can use the form/workflow?
  • Who can edit the form/workflow?
  • Who can view form/workflow submissions?
  • Who can edit form/workflow submissions?
  • Who can access the audit trail - available only for workflows
  • Who can administer the workflow - available only for workflows
Section


Column
width50%

ACL Permissions for Forms


Column
width50%

ACL Permissions for Workflows



Dynamic ACLs

Templates provide the ability to dynamically determine and restrict access to submissions/task audit trails when assigning Access Control permissions. Templates are like variables in your form that can be filled in by the user, populated by a business rule or from a back end system. Type your control name enclosed in curly braces in any supported ACL field, and that template be replaced with the value of the associated control. For example, the list below contains a fixed role (Manager) and a dynamic template based role ({AcctMgrRole}).

Info

The ACL settings are retained when you download/upload a form/workflow/project to another designer user in the same or different tenant and when you copy a form/workflow.

In the example discussed below, templates are used to navigate the workflow to the correct employee in the Accounting department and to define user lists to dynamically control access. 

Note
iconfalse
titleImportant Note on Dynamic Access Controls:
  • Whenever a template is used to determine access control the derived set of users and roles are tied to the submission. They will only change if the submission is edited. Once a user/role is granted permission to a submission dynamically, that cannot be changed by editing the access control configuration in the designer.
  • Dynamic ACLs work per submission when that form/workflow is being submitted. If you change ACL permissions they will not take effect for the old submissions automatically as the related ACL record was not created when that particular submission was made. Old submissions must be edited and re-submitted for the changes to take effect.
  • Templates are not supported for the Who can start the form/workflow and Who can edit the form/workflow permission.
  • Global _data templates are not supported for any Access Control fields at this time.

Who can start the form/workflow

Setting this permission determines who is allowed to create form/workflow submissions. The default value for forms is Anyone (login not required) and for workflows is Authenticated Users (login required). The designer can select one of the following choices to specify form/workflow visibility. 

  • Anyone (login not required) - anyone can use it even if they are not logged in. A form/workflow made public this way is accessible to anyone with the form/workflow's URL. The other options have higher levels of security. See form security for details.
  • Authenticated Users (login required) - the form is usable to anyone who has an account (username/password) and is logged in to your tenant. 
  • Designers/Owner Only - only the designer user who created the form/workflow (owner) can use it. They must be logged into frevvo.
  • Custom - The designer may configure selected users and/or roles (i.e. users with these roles) to have runtime access to the form. Users and Roles can be selected via an editable combo-box control. As the user types, frevvo will try to find any roles and users in the tenant that contain the typed string. Up to 5 matches are displayed below the combo box. Selecting a role/user from the dropdown inserts the selection into the list. 

Info

The owning designer always has access to the form/workflow, even when Custom permissions are used. 

Click Submit or continue with the next option in the Access Control wizard. 

Note

Templates are not supported for this permission.

User Experience

Users who have "Who can start the form/workflow" access will see the form/workflow and be able to fill it out when it is shared with them (e.g. via a share link, portal, or embedded in a website.) If the permission is set to authenticated users and/or roles, the user must be logged in to see the form/workflow.

Users who are not logged in and trying to access a form/workflow with "Who can start the form/workflow" permission set to all or custom authenticated users will be prompted to log in.

Logged-in users who do not have "Who can start the form/workflow" access will see an error message when they try to access the form: "Error Access Denied. Authentication required. Are you trying to access a private form or workflow?" This error will never be shown when this permission is set to Anyone (login not required).

Public forms that include the save/load feature or digital signatures will prompt the user with the login screen when they click to save or sign. These frevvo features require a login.

Who can edit the form/workflow

Warning
  • Edit permissions should not be given to forms or workflows currently in production use. Please see the Admin Best Practices Guide
  • Users with this permission have the ability to run the Refresh Searchable Fields process for the forms/workflows they are editing. This process updates existing submissions if changes are made to Searchable Fields.

Form and workflow owners (designer users that created the form/workflow) can give other users (designers/non-designers) the capability to edit form/workflows. This is particularly helpful if a designer user takes a leave of absence or leaves the company. The "backup designer" has the ability to make changes to the form/workflow without having to download the form/workflow(s) from the owner's account to the backup designer's account. The "backup designer" also can view related submissions by clicking on the Submissions icon. The ability to edit submissions is granted by a different permission.

Note

Users with or without the role of frevvo.Designer can be assigned the permission to edit forms/workflows.

Users given this permission access the shared form/workflow from the Shared Items tab even if they have the frevvo.Designer role assigned to them. They can only edit the form/workflow that was shared with them. They will not have the ability to create new forms/workflows from the Shared Items tab. The ability to make changes to a form/workflow is not available from Shared Items on the Important Items menu in a frevvo portal.

To assign users the ability to edit forms/workflows, follow these steps:

  1.  Open the Access Control wizard.
  2. Click the right arrow to expand the Who can edit the form/workflow section.
  3. Enter the roles that you want to grant editing capability to in the Roles section. Begin typing the role name then select the role from the dropdown. 
  4. Enter the users that you want to grant editing capability to in the Users section. Begin typing the user id then select the user from the dropdown.

    Info

    Templates are not supported for this permission.


  5. Save the form/workflow.

Users that have been granted the editing permission access forms and workflows that have been shared with them via the Shared Items tab on their Home Page. Users cannot edit forms/workflows in the Shared Items selection in a portal or any other embedded scenario.

A browser notification message displays if the user who has been granted permission to edit forms/workflows tries to modify their own ACL. frevvo will not allow the "backup designer" to remove themselves from the ACL list.

Who can view submissions

The designer can assign permission to view form/workflow submissions to specific roles/users.  Any user with view access can view submissions in read-only mode. Submission deletion is not allowed. Templates can be used to dynamically determine at runtime which users and roles are allowed to view submissions.

To assign permission to view submissions, follow these steps:

  1. Open the Access Control wizard.
  2. Click the right arrow to expand the Who can view submissions section.
  3. Enter the roles you want to grant view access to in the Roles section. Begin typing the role name then select the role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  4. Enter the users you want to grant view access to in the Users section. Begin typing the user id then select the user id role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  5. Click Submit or go to the next permission section in the Access Control List.

Who can edit submissions

The designer can assign permission to edit form/workflow submissions to specific roles/users. Any user with edit access can view, edit and delete submissions in the SUBMITTED, ABORTED, or ERROR states. Submissions in the PENDING, SAVED or WAITING states can only be deleted by the tenant admin, workflow admin or designer user that created the workflow. Refer to the Deleting Submissions for more information.

Templates can be used to dynamically determine at runtime which users and roles are allowed to edit submissions.

To assign permission to edit submissions, follow these steps:

  1. Open the Access Control wizard.
  2. Click the right arrow to expand the Who can edit submissions section.
  3. Enter the roles you want to grant edit access to in the Roles section. Begin typing the role name then select the role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  4. Enter the users you want to grant edit access to in the Users section. Begin typing the user id then select the user id role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  5. Save the form/workflow.

Who can access the audit trail - Workflows Only

 The Audit Trail is accessed on a frevvo user's Task List by clicking the View Task History icon. Roles/Users granted this permission will see theView Task History icon on tasks in their task list.

To assign permission to view the audit trail, follow these steps:

  1. Open the Access Control wizard.
  2. Click the right arrow to expand the Who can access the audit trail section.
  3. Enter the roles you want to grant edit access to in the Roles section. Begin typing the role name then select the role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  4. Enter the users you want to grant edit access to in the Users section. Begin typing the user id then select the user id role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  5. Custom indicates that only users granted explicit access or with one of the specified roles can view the audit trail for the task (provided they have access to the task).  Roles and users can be selected via an editable combo-box control

  6.  Enter the roles you want to grant audit trail access to in the Roles section. Begin typing the role name then select the role from the dropdown. You can enter control names from your workflow encased in curly braces to act as templates for dynamic access.
  7. Enter the users you want to grant audit trail access to in the Users section. Begin typing the user id then select the user id from the dropdown. You can enter control names from your workflow encased in curly braces to act as templates for dynamic access.
  8. Save the form/workflow. 


Who can administer the workflow - Workflows Only

This permission lets a user abort, reassign and reset tasks that are not assigned to them. These administrative tasks are no longer restricted to tenant admins.

The designer can delegate these tasks to additional users/roles by assigning them in the Who can administer the workflow section of the Access Control dropdown. Any user/roles listed here will be considered a Workflow Administrator.  As such, the Modify Task icon on a task in the task list will be displayed. Tenant admins and designer users get the Modify Task icon by default. 

To assign user/roles as Workflow Administrators, follow these steps:

  1. Open the Access Control wizard.
  2. Click the right arrow to expand the Who can administer the workflow section.
  3. Enter the roles you want to grant workflow admin access to in the Roles section. Begin typing the role name then select the role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  4. Enter the users you want to grant workflow admin access in the Users section. Begin typing the user id then select the user id role from the dropdown. You can enter control names from your form/workflow encased in curly braces to act as templates for dynamic access.
  5. Save the form/workflow.

User jerry has been designated as a workflow administrator for the Expense Report but not for the Time Sheet workflow. When Jerry logs into frevvo, his task list will appear as shown:

The Modify Task dialog allows a 'workflow admin' to execute any one of abort/reassign/reset functions.

When searching for tasks, if a workflow is chosen, and the user is a workflow admin for it, then all tasks for that workflow display. If no workflow is selected, then all tasks, even those that the workflow admin has not participated in, plus tasks for which the user is a workflow admin will display.

Shared Items

Submissions

All users granted Submission Access, either by user id or because they have a granted role, will see the Shared Item tab on their Home Page. Click on the  Action menu and select Submissions icons to view/edit them. 

...

The functions needed to edit forms/workflows are only displayed when users given the permission access the Shared Items tab from their Home Page if they are a designer or by clicking the  icon on the Task List. The ability to make changes to a form/workflow is not available from Shared Items on the Important Items menu in a frevvo portal.

Warning

Just a reminder, edit permissions should not be given for production forms or workflows. Please see the Admin Best Practices Guide.

The functions provided to edit forms/workflows from the Shared Items tab, do not include the option to delete or copy them. Deletion of a form/workflow is not available to the "backup designer".  Forms/workflows can be copied by the download/upload functions. The backup designer has the ability to run the Refresh Searchable Fields process to update previous submissions with changes made to Searchable Fields by clicking on the  Action Menu and selecting Refresh Search Fields.

...

Let's consider an example to illustrate how this feature works. An Accounting Department in a company has three employees, Sue, Jack, and Jill. There are three project categories: Sales Demo, Customer Meetings, and Infrastructure. Sue is responsible for processing Expense Reports for the Sales Demonstration project, Jack processes Expense Reports for the Customer Meeting project and Jill processes Expense Reports for the Infrastructure project. The Accounting employees must have the ability to view and edit only the Expense Report submissions they processed. Jerry is the manager who approves/rejects the Expense Reports. He can view all the Expense Report submissions but cannot edit them. Any employee in the company can submit an Expense Report. Jerry, Jack, Jill, and Sue are workflow administrators so you will see the  Modify icon in the images of their task lists.

...

When Jill completes the processing and then clicks on the Shared Item tab, she will see only the Expense Report submissions that she processed. He can edit the submisions and submissions and SUBMITTED, ABORTED submissions, or submissions reporting an error condition, if necessary. 

...