Permissions Business Rules

When a segment is added to an existing group other than System segment, by default, the segment’s menu permissions and defaults are copied to the new segment/group.

No Read-Only permissions are allowed on new/create screens.

No Admin permissions are allowed on non-user defined item number screens.

No Admin permissions are allowed in New or Query - only on Edit screens.

If Full Access is given to New, at least Read-Only is required on Edit.

If Full or Read-Only is given to Query, at least Read-Only is required on Edit.

If parent is set to No Access, all children must be No Access.

If parent is set to Read-Only, all children must be Read-Only or No Access.

If parent is set to Full Access, all children must be Read-Only, Full, or No Access.

Admin is not allowed at folder level.