Giving users the ability to manager security?

[jjfcpa]

We have developed a solution that will be a subscription service. Multiple company's data will be in one file.

How do you give each company the ability to manage security for THEIR data? In other words, we want to give them the ability to add users and passwords for their data.

[bcooney]

I don't see a way of doing this. You don't secure at the data level, really, but at the field level. What I mean, is that in order to create a rla calc particular to a gCompany (matching the account's company at login), you'd need case statements in the rule. I don't see how you'd not get yourself into a hard-coded corner doing that.

Edited November 7, 2010 by Guest

[Vaughan]

You'd need separate privilege sets that only allow access to each company's records. This is not hard to do. Multiple privilege sets may allow read only or write access.

The trick is ensuring that the correct privilege sets are used, so people don't see the wrong records.

I'd consider splitting the solutions.