The web interface automatically handles access rights. Only records and columns that the accessing user is authorized to view are displayed in item lists, XML exports, and on the web page.
During imports, only items for which the user has the appropriate permissions can be modified.
Access rights can be restricted in the following ways:
the user cannot access a given register at all, or has read-only access to it
the user can only see certain records (e.g., from their own cost center) or can only modify certain records
the user can only see certain columns (e.g., purchase prices are hidden) and can only edit certain columns
the application license does not permit use of the given item
In the item list, users always see only the items they are authorized to access, including information about whether they are allowed to modify them. It is also possible that a user generally has permission to modify a given item, but not a specific row (e.g., because it is locked). If the rows a user can see are restricted, it appears as though no data exists in the application at all.
If a user attempts to modify items they do not have permission to change, this is silently ignored and only the items the user is authorized to modify are updated. If the user attempts to modify entire records without the required permissions, an error is raised and the entire operation is rejected.