How to provide limited ability to Delete Project Task

[guislainlagron]

Hi,

I have 1 clarification & 1 need.

Clarification:

• It appears that according to the Task Delete Record ACL and Delete [Global] UI Action, that users who have project_manager role should be able to delete a Project Task from the form, but as I impersonate such a user I do not see the Delete button. Why?

Need:

• I would like to enable a project_user to delete Project Task, as long as they created it and its state is Pending, so I created the following UI Action
  • Name=DELETE
  • Table=Project Task
  • Action=sysver_delete
  • Active=true
  • ShowUpdate=true
  • Client=true
  • FormButton=true
  • OnClick=confirmAndDeleteFromForm()
  • Condition=current.isValidRecord() && current.canDelete() && gs.getUserID() == current.sys_created_by && current.state == 1
  • Script=current.deleteRecord();
  • RequiresRole=project_user
• Yet, when I impersonate such a user my DELETE button does not show up on the form for a Pending Project Task which I just created. Why?

My questions are:

1. Is the solution to my need correct?
2. If so, is it related to the clarification, not working as expected?

Any hint would be appreciated; thanks!

Guislain

[guislainlagron]

Hi Earl,

Thank you so much for your clear tips! Getting closer...

I toggled the Application picker on the SN banner, deleted my previous custom ACL, then recreated it under Global

Yet my User

still cannot delete a pending Project Task assigned to him

but then again, neither does Amelia (like in your example) who has the right permissions:

nor can the System Administrator, who has override...

...and I thought that it was going to work this time, albeit System Administrator not being able to do it all along may point to yet another higher level of permissions or a global setting, perhaps.

Scratching my head...

Guislain

[guislainlagron]

And I thought I found it...

but no change even after enabling that.

[Earl L]

Guislain,

As Arun suggested, it's time to jump into the security debugging tools to see what's going on here. It's a little intimidating the first time you use it but if you read the docs on it you'll get the hang of it really quickly.

In the app navigation filter type "debug" and find the "Debug Security" module and click on that. It'll turn security debugging on for your session, until you turn it off. After you turn on debug you can impersonate a different user and then watch what happens as each page is evaluated and displayed. You'll be looking for the text "record/pm_project_task/delete" and you're going to want to click into any of the indicators that are not a green check mark. The docs explain what each of the indicators represent and then you can click into each one to see more detail about them.

And if you want to give me temporary access to your developer instance so I can look at it I'd be glad to take a look.

Earl

[Earl L]

I'm curious, do you regularly get warning messages that say you're trying to change something in the global context when the active context is the Fiscal Calendar application? I see those quite a bit when I'm switching between custom apps and the global context, and they are a good reminder for exactly the thing you're up against right now.

Earl

[guislainlagron]

Sorry for the late reply; yes I did.