More about security permissions

Security permissions in Practice CS can be complex, especially for firms with multiple offices that restrict access by office. For instance, if a security group has permission to view and print client-based reports but has no restrictions on viewing clients, members may be able to view clients from other offices without you realizing it.
Understanding how permissions relate to each other — also known as dependencies — is crucial for setting up security groups correctly. Practice CS helps you track these relationships through the
Privileges changed
pane.

About the
privileges changed
pane

In the
Security Groups setup
screen, use the
Privilege Selection
pane to modify permissions for a security group. Each time you make a change, the
Privilege Selection
pane displays the results of that change.
note
The
Privileges changed
pane only shows the results of your most recent change.

Types of permissions

Permissions in the
Security Groups setup
screen are divided into 2 types: menu permissions and data permissions.
  • Menu permissions
    relate to items in Practice CS, such as dashboard portlets, entry and billing screens, reports, and other screens and windows. These permissions control the ability to view or change data.
  • Data permissions
    relate to data entered into or produced by Practice CS, such as client, staff, billing, time and expense, or project management data.
    note
    Some data permissions appear under
    Menu
    on the
    Security Groups setup
    screen, such as
    Menu
    Setup Menu
    Clients
    View
    .

Turn on menu permissions

Menu permissions often depend on data permissions. When you turn on a menu permission, Practice CS also turns on the corresponding data permissions, unless you have already configured compatible permissions. The
Privileges changed
pane shows all permission changes caused by your most recent update, so you can review and adjust them as needed.
Practice CS will not replace the data restrictions you have already set up. If the security group has no existing permissions for a type of data, Practice CS turns on full access. For data permissions that are already configured — for example, limiting access to engagements in the same office — Practice CS preserves those settings instead of replacing them.

Restrict data permissions

When you turn on menu permissions, Practice CS may also turn on permissions for related data. The reverse is also true: when you restrict data permissions, Practice CS removes permissions for related menu items that depend on that data.
When you restrict data permissions, Practice CS doesn’t preserve previous settings the way it does when turning on menu permissions. If you turn off permissions for a type of data, Practice CS also turns off permissions for all related menu items that require that data.