Not all fields in a document should be visible—or editable—by every user. With Field-Level Permissions and Perm Levels in iVendNext, you can:
Hide sensitive fields (e.g., salary, cost prices).
Make fields read-only for certain roles (e.g., prevent sales staff from editing payment terms).
Group fields by security tiers (e.g., "Level 1: Basic, Level 2: Financial").
Permission Levels (0-9): Numeric groups assigned to fields. By default, all fields are Level 0.
No Hierarchy: Level 3 isn’t "higher" than Level 1—they’re just tags for grouping.
Role-Based Control: Each role can be granted Read/Write access to specific levels.
Example:
Level 0: Basic fields (e.g., Customer Name).
Level 2: Financial fields (e.g., Item Rate, Discount).
Go to Customize Form (Home > Developer > Customize).
Select the DocType (e.g., "Sales Invoice Item").
Expand the target field (e.g., "Item Rate") and set its Perm Level (e.g., "2").
Save.
Open Role Permissions Manager (Home > Users and Permissions).
Select the Document Type and Role (e.g., "Sales User").
Add a rule for the Perm Level (e.g., Level 2 = "Read Only").
Sales Users see the Item Rate but cannot edit it.
Accounts Managers (with Write access to Level 2) can modify it.
Goal: Hide salary fields from non-HR roles.
Set Perm Level 3 for "Basic Salary" in the Employee DocType.
In Role Permissions Manager:
Grant HR Manager: Read/Write for Level 3.
Deny all other roles.
Goal: Let sales teams view—but not change—item rates.
Set Perm Level 2 for "Rate" in Sales Order Item.
Assign Sales User: Read (no Write) for Level 2.
Bulk Apply Perm Levels:
Change a section’s Perm Level to affect all fields within it.
Combine with User Permissions:
Restrict both field access (Perm Levels) and record access (e.g., by Territory).
Audit with Reports:
Use "Permitted Documents for User" to verify field visibility.
Here’s a quick look at some common issues you might run into.
Field not hiding?
Check:
Perm Level is assigned to the correct DocType.
Role Permissions explicitly deny the level.
Unexpected edits?
Ensure Write access isn’t granted to unintended roles.