Permission System - MeTEY uses a comprehensive permission system with 11 granular permission areas. Administrators can control exactly what each user can see and do in the application.
Overview
Permissions control what operations users can perform in different areas of the system. Each user is assigned specific permission levels for each functional area of the application.
11 Permission Areas
MeTEY divides access control into these functional areas:
| Area | Controls Access To |
|---|---|
| Client | Customer management, contacts, addresses, credit limits |
| Supplier | Supplier management, contacts, addresses, payment terms |
| Product | Product catalog, pricing, inventory data |
| QOI | Quotes, Orders, Invoices - complete sales workflow |
| PO | Purchase Orders, receiving, supplier ordering |
| Inventory | Inventory adjustments, physical counts, MTR management |
| AR | Accounts Receivable - customer payments, aging, statements |
| AP | Accounts Payable - supplier invoices, payments, clearing |
| GL | General Ledger - chart of accounts, journal entries, reports |
| Report | Business reporting, analytics, data export |
| Admin | System administration, user management, permissions |
6 Permission Levels
Each permission area can be set to one of six levels:
No Access
User cannot see or access this area.
- Menu items are completely hidden
- All operations blocked
- Cannot view any data in this area
Read Only
User can view data but cannot modify anything.
- All forms and fields are disabled but visible
- Can search and view records
- Cannot create, edit, or delete
- Useful for: Auditors, viewers, reporting staff
Read + Create
User can view existing data and create new records, but cannot modify existing ones.
- Can view all existing records
- "New" buttons are enabled
- Cannot edit existing records
- Useful for: Data entry staff who should not modify history
Read + Update
User can view and edit existing data, but cannot create new records.
- Can view all records
- "Edit" buttons are enabled
- Cannot create new records
- Useful for: Maintenance staff who update but don't add new data
Read + Create + Update
User has full access except delete operations. Can view, create, and modify records.
- Can view all records
- Can create new records
- Can edit existing records
- Cannot delete (soft delete) records
- Useful for: Most operational users
Complete Access
User has unlimited access to all operations including delete (soft delete).
- All operations enabled
- Can view, create, edit, and delete
- Complete control over the area
- Useful for: Managers, supervisors, administrators
Financial Exclusion (-f Suffix)
Any permission level can have a -f suffix (e.g., RCU-f, FULL-f) to exclude financial information.
What Financial Exclusion Hides
- Credit Limits: Customer credit limits not displayed
- Pricing: Product costs and prices hidden
- Costs: Purchase costs concealed
- Profit Margins: Margin calculations not shown
- Payment Information: Payment amounts restricted
- Financial Reports: Cost-related reports hidden
Use Cases for Financial Exclusion
- Sales Representatives: Can create quotes/orders without seeing costs or margins
- Data Entry Staff: Can enter customers without seeing credit limits
- Warehouse Staff: Can view products without seeing pricing
- External Contractors: Limited access without financial exposure
RCU-f for Client management can create and edit customers, but won't see credit limits or financial terms. They can quote from price lists but cannot see cost or margin data.
Managing User Permissions
Administrators with Admin permissions can manage user access:
1 Navigate to User Management
Go to Administration → User & Access Management
2 Search for User
Use the search box to find the user you want to manage. Search by username, email, or name.
3 Edit Permissions
Click the Edit button next to the user. A modal will open with a 3-column grid showing all 11 permission areas.
4 Set Permission Levels
For each of the 11 areas, select the appropriate permission level from the dropdown:
- Color-coded badges help visualize permission levels
- Each dropdown shows all 6 levels plus financial exclusion options
- Changes are shown in real-time with color updates
5 Save Changes
Click "Save". The system:
- Validates all permission assignments
- Tracks permission history with dates and who made changes
- Updates user's access immediately
- Logs the change for audit purposes
Creating New Users
Administrators can create new user accounts with specific permissions:
- Click "+ New User" button in User Management
- Enter username (email) and temporary password
- Set permission levels for all 11 areas (new users default to NO access)
- Assign company and branch
- Set status to ACTIVE
- Click "Create" - user can login immediately with assigned permissions
💡 New User Best Practice
Start with minimal permissions and increase as needed. It's easier to grant additional access than to revoke excessive permissions.
How Permissions Affect the Interface
Menu Items
Menu items you don't have permission for are automatically hidden. If you have NO access to an area, the menu item won't appear at all.
Action Buttons
- "+ New" buttons only appear if you have Create (C) permission
- "✏️ Edit" buttons only appear if you have Update (U) permission
- "🗑️ Delete" options only appear with FULL permission
Context Menus
Hamburger menus (☰) and right-click menus show only allowed operations. Disabled operations are hidden entirely.
Read-Only Forms
If you have R (read-only) permission:
- All form fields are disabled (grayed out)
- Data is visible but cannot be modified
- Save buttons are hidden
- You can view and search but not change anything
Financial Fields
With -f suffix permission:
- Financial fields are completely hidden (not just disabled)
- Price columns in tables are removed
- Cost-related reports don't appear in menus
- System behaves as if these fields don't exist
Permission History
MeTEY tracks complete permission history for audit and compliance:
- View History: Click history icon next to any user in User Management
- Temporal Tracking: See from_date and to_date for each permission assignment
- Change Log: View who granted/changed permissions and when
- Active vs. Historical: Color-coded display shows current vs. past permissions
- Audit Compliance: Complete audit trail for regulatory requirements
Safety Features
Built-in Protection Mechanisms
- Self-Protection: Users cannot remove their own admin rights
- Real-Time Validation: System validates permissions before saving
- Session Caching: Permissions loaded once at login for fast checks
- Audit Trail: Complete history of all permission changes
- Immediate Effect: Permission changes take effect on next action (no logout required)
Common Permission Scenarios
💼 Sales Representative
| Area | Permission |
|---|---|
| Client | |
| QOI | |
| Product | |
| All Others |
Can manage customers and create quotes/orders without seeing financial data.
📊 Warehouse Manager
| Area | Permission |
|---|---|
| Product | |
| Inventory | |
| PO | |
| All Others |
Can manage inventory and view orders, but cannot create financial records.
💰 Accountant
| Area | Permission |
|---|---|
| AR | |
| AP | |
| GL | |
| Report | |
| All Others |
Complete financial access with read-only view of operations.
👨💼 Manager/Supervisor
| Area | Permission |
|---|---|
| All Areas |
Complete access to all operations and data.
Troubleshooting Permission Issues
Can't see a menu item?
You need at least permission for that area. Contact your administrator to request access.
Buttons are disabled?
You have (read-only) permission. Contact admin for Create or Update permissions.
Financial fields missing?
You have -f suffix on your permission. This is intentional to hide financial data. If you need to see this data, request standard permission without the -f suffix.
Operation blocked?
Your permission level doesn't include that operation:
- doesn't allow editing existing records
- doesn't allow creating new records
- doesn't allow deleting records
Request higher permission level if needed.
Need Permission Changes?
Contact your system administrator to request permission level changes. They can view your current permissions and modify them as needed. All permission changes are logged for security and audit purposes.