Object Authorizations per Status 

Use

To enable you to control exactly who works on an object in different phases of a project, it is possible to create authorizations that depend on the status of an object.

Features

In a status profile, you can assign authorizations to each status by choosing Object Authorizations in the status detail screen. You can assign a user, user group, or role to the status and also define what sort of activities they can carry out, for example, read, write, delete, and so on. When a cFolders object using this particular status profile achieves a particular status, only those users, user groups, and roles assigned to the status in the status profile can work on the object.

To ensure that the status transitions can be carried out, you must do one of the following:

●      Assign write authorization for the object to at least one user in each status.

●      Specifically assign authorization to carry out the status transition to a user. The user must have at least read authorization for the object.

For more information, see Transition Authorization.

Object authorizations in a status profile override all other authorizations for an object.

If, for example, user Steve Gates has administration authorization for a collaboration in which document A is located, he would normally have administration authorization for all objects in the collaboration including document A. However, if document A has a status profile with object authorizations and Gates has not been assigned authorization in any of the statuses, he will not be able to work on the document at all, that is, he will not even have read authorization for the document.

Note that the object authorizations are optional. If you do not create object authorizations in a status profile, then the normal authorizations are valid for an object with this status profile, for example, authorizations inherited by the object or specifically assigned to it. As soon as you create object authorizations in a status profile, however, they are valid for any object using this status profile and override all other authorizations.

Also note that as soon as you assign a status profile with object authorizations to an object, the authorizations for the object defined by the status are inherited by all objects below that object until the system finds an object with another status profile with status authorizations.