Data Policies
Data Policies control record-level access for a form.
Use data policies when a role should only access certain records, such as all records, records created by the subject, records updated by the subject, or records matched by a custom subject rule.
Open Data Policies
In Resource Permissions, find a form resource and open Data Policies.
The dialog shows a matrix of actions and scopes for that form.
Actions
Common data policy actions include:
| Action | Description |
|---|---|
| View | Allows viewing matching records |
| Edit | Allows updating matching records |
| Delete | Allows deleting matching records |
Runtime print access can also depend on form and button permissions.
Scopes
| Scope | Description |
|---|---|
| All Records | Applies to every record in the form |
| Creator | Applies when the subject is the record creator |
| Updater | Applies when the subject is the latest updater |
| Custom Rule | Applies when a configured member rule matches the subject |
Values
| Value | Meaning |
|---|---|
| Not Configured | No explicit data policy is saved for the cell |
| Allow | Grants the action for that scope |
| Deny | Denies the action for that scope |
When advanced policies already exist, saving the matrix can overwrite rules outside the current matrix.
Relationship With Entry Permissions
A data policy alone is not enough for normal page access.
For example, a subject may be allowed to view a record by data policy, but if the form is not visible or the view button is not allowed, the subject still cannot access the record from the form entry.