Effective permission management and web view configuration are critical for maintaining data security while enabling collaboration in iVendNext. This article provides a comprehensive approach to controlling access to your DocTypes and making them available on web portals when needed.
iVendNext uses a layered permission system:
Role-Based Access: Permissions assigned to roles (Admin, Accountant, etc.)
Document-Level Controls: Restrictions on specific DocTypes
Field-Level Security: Hide/show individual fields
Navigate to:
Setup > Users > Role Permissions Manager
Select a role (e.g., "Sales Manager")
Set permissions for relevant DocTypes:
Create: Add new records
Read: View documents
Write: Modify existing records
Delete: Remove documents
Submit: Complete workflows
Save changes
Pro Tip: Use Role Profiles to standardize permissions across similar roles.
Use client scripts to dynamically control field visibility:
// Hide cost fields for non-finance users
if (!ivendnext.has_role("Accountant")) {
cur_frm.set_df_property("unit_cost", "hidden", 1);
cur_frm.set_df_property("total_cost", "hidden", 1);
}
Implement Document Sharing Rules for sensitive documents:
Go to:
Setup > Users > Document Share Settings
Configure rules based on:
Departments
Territories
Custom criteria
To make a DocType available on customer/vendor portals:
Edit the DocType:
Setup > Customize > DocType > [Your DocType]
Under Web View section:
Check "Allow in Website"
Set "Show in Menu" (optional)
Configure portal display settings
Field Filtering: Hide internal fields from web users
Custom Templates: Modify how documents render on the portal
Access Logs: Monitor portal activity via:
Setup > Logs > Web Access Log
Here’s a quick look at some common issues you might run into.
Some of the best practices are:
Principle of Least Privilege: Grant minimum required access
Regular Audits: Review permissions quarterly
Testing: Verify permissions with test users before rollout
Documentation: Maintain permission matrices