Separation of organizations between groups of users

In the «Passport of the field» there is introduced the subsystem of differentiation of the data of various organizations between users groups (UG) which functions by following principles:

1. One UG may have access to the data of several organizations.

2. Data of one organization can be accessible to several UG.

3. Access right of UG to data of the organization does not extend to data of the subordinated organizations.

4. Connection of UG and the organizations is checked at a stage of authorization.

5. UG «Administrator» has access to data of all organizations.

6. To view and edit the connections of users and organizations have the right only users from group «Administrator».

Maintaining lists of the organizations accessible to users of group is combined with dialog of editing the access rights.

Dialog of editing the access rights: