Permission Query
Permission Query checks the effective permission result for a subject.
Use it to diagnose why a member, department, or organization can or cannot access a form record.
Run A Query
- Click Permission Query
- Select the subject type: member, department, or organization
- Select the subject
- Optionally select a form
- Optionally select a record from that form
- Click Query
If no form and record are selected, the query focuses on the subject's active roles.
Query Result
The result can show:
| Section | Description |
|---|---|
| All Roles | Effective roles for the subject |
| Selected Record | Record selected for the query |
| Form Entry And Button Permissions | Whether form visibility and key buttons are allowed |
| Data Permissions | Whether record actions such as view, edit, and delete are allowed |
Decision Points
Permission Query explains why an action is allowed or not allowed.
Possible points include:
- a matching role data policy
- a default subject permission such as creator or updater
- a condition sharing rule
- Space Admin system permission
- no matching rule
Troubleshooting
When a user cannot see a record, check form visibility and view button permission first, then check data permissions.
When a user can see a record but cannot edit or delete it, check data policy actions and the corresponding runtime button permissions.