Différences

Ci-dessous, les différences entre deux révisions de la page.

--- en:wiki:utilisateurs:privileges [2025/06/24 19:16] – créée - modification externe 127.0.0.1
+++ en:wiki:utilisateurs:privileges [2026/10/19 09:25] (Version actuelle) – Automatic push translation eneuville
@@ Ligne 1: / Ligne 1: @@
-====== User Privileges ======
+====== User privileges ======
-FIXME A1 proofreading not yet effective for this page. In the meantime, you can ask any questions on the [[https://forum.gestan.fr|forum]].
-It is possible, for each user, to define specific privileges:
+It is possible to define specific privileges for each user:
-   * basic permissions (connection right, administration right, configuration right)
+  * basic permissions (login rights, administration rights, configuration rights)
-   * access rights to major files
+  * access rights to key files
-   * additional special rights
+  * additional specific rights
 ===== List of privileges =====
-//**Access: ** Tools -> Administration -> Users -> Privileges//
+//**Access:** Tools -> Administration -> Users -> Privileges//
-{{:fr:wiki:utilisateurs:user_11a.png?nolink|}}
+{{fr:wiki:utilisateurs:user_11a.png?nolink|}}
 The table displays all users registered for the database.
-The table context menu allows you to copy the privileges of the selected user to a pool, a service, or all users.
+The table’s context menu allows you to copy the selected user’s privileges to a pool, a service, or all users.
-{{:fr:wiki:utilisateurs:user_11b.png?nolink|}}
+{{fr:wiki:utilisateurs:user_11b.png?nolink|}}
-Double-click on the column:
+Double-clicking on the column:
-     * **Adm** grants or revokes the **administrative privilege** of the database
+    * **Adm** grants or revokes the **administration privilege** for the database
-     * **Param** grants or revokes the **parameterization privilege** of the database
+    * **Param** grants or revokes the **privilege to configure** for the database
-     * **Cnx** grants or revokes **connection privilege** to the database
+    * **Cnx** grants or revokes the **connection privilege** to the database
+=== Administration privilege ===
-=== Administrative privilege ===
+The administration privilege allows you to:
+  * create new users for Gestan
+  * authorise or deny connections to other users of Gestan
+  * grant or revoke administration privileges
+  * to access the administration menu at Gestan
+  * to amend an invoice, quotation or credit note after it has been sent to the customer (all amendments are logged in a journal)
+  * to send an email from another user’s account at Gestan
-The administrative privilege allows:
+Depending on the settings at Gestan, the following operations may be restricted to administrators:
-   * create new users for Gestan
+  * deleting a stock movement without creating a reversing entry
-   * to authorize or refuse connections to other Gestan users
-   * assign or revoke administrative privileges
-   * to access the Gestan administration menu
-   * to modify an invoice, a quote, a credit note after transmission to the customer (any modification is archived in a journal)
-   * to send an email from the account of another Gestan user
-Depending on the Gestan settings, these operations can be reserved for administrators:
+Upon first launch, Gestan creates an initial user with administrator privileges.
-   * the deletion of a stock movement without creating a reversal movement
-On first launch, Gestan creates a first user with administrator privileges.
+=== Configuration privileges ===
-=== Settings privilege ===
+Gestan comprises independent modules (customer invoicing, supplier invoicing, accounts, statistics, etc.).
-Gestan includes independent modules (customer invoicing, supplier invoicing, accounting, statistics, etc.).
+This privilege allows you to configure access to the modules for each user, and to prevent anyone without this privilege from modifying the settings.
-This privilege allows you to configure access to modules for each user, and to prohibit modification of the settings by any person who does not benefit from this privilege.
+=== Login Privilege ===
-=== Login privilege ===
+This allows the user to log in, or not, to Gestan.
-It allows the user to connect, or not, to Gestan.
+:TIP: It is also possible to block logins [[en:wiki:admin:ordireseau|from a specific MAC address]].
-:TIP: It is also possible to refuse connections [[en:wiki:admin:ordireseau|from a MAC address]].
+===== Privileges page =====
-===== Privileges sheet =====
+==== ‘Access’ tab ====
-==== Access tab ====
+{{fr:wiki:utilisateurs:privileges_01.png?nolink|}}
-{{:fr:wiki:utilisateurs:privileges_01.png?nolink|}}
+For the main files in Gestan, there are six possible access control options:
-For major Gestan files, there are six possible access control options:
+  * No read access + No write access: the user has no access to the file in question
+  * Limited read access + No write access: the user can view records they have created, but cannot update them. This is a rare case.
+  * Limited read access + Limited update access: the user can view the records they have created and update them.
+  * Extended read-only access + no update rights: the user can view all records, but cannot make any updates. This is general read-only access.
+  * Extended view-only access + limited update rights: the user can view all records, but may only update those they have created.
+  * Extended view-only access + extended update rights: this is full access to the file.
-   * Zero consultation + zero SHIFT: the user has no access to the file considered
+If the **Tracking** is ticked, for the file in question, access control is no longer based on the user who created the record, but on the responsible user (for example, the sales representative in charge of the customer, or the back-office manager responsible for tracking the quotation).
-   * Reduced consultation + zero update: the user can consult the records created by him, but cannot make an update. This is a rare case.
-   * Reduced consultation + reduced update: the user can consult the records created by him and carry out updates.
-   * Extended consultation + zero update: the user can consult all records, but cannot make any updates. It is general access for simple consultation.
-   * Extended consultation + reduced update: the user can access all the records in consultation, but will only be able to update the records created by him.
-   * Extended consultation + extended SHIFT: this is full access to the file.
-If the **Monitoring** box is checked, for the file considered, the control is no longer carried out in relation to the user who created the record, but in relation to the user responsible (for example, the sales representative responsible for of the customer, or the backoffice manager responsible for monitoring the quote).
+==== ‘Documents’ tab ====
-==== Parts tab ====
+This tab allows you to define permissions for documents.
-This tab allows you to define the privileges on the parts.
+{{fr:wiki:utilisateurs:privileges_02.png?nolink|}}
-{{:fr:wiki:utilisateurs:privileges_02.png?nolink|}}
+**Manage documents** : grants the right to revert a “sent” document to “draft” status (excluding invoices and credit notes for non-administrators), so that it can be amended after transmission (if the user is an administrator, they automatically have this right), as well as the right to delete documents, except invoices if the user is not an administrator (any changes to a document are archived and logged).
-**Administer documents**: gives the right to return to the "draft" status for a "transmitted" document (excluding invoices and credit notes for non-administrators), in order to be able to modify it after transmission (if the user is admin , he necessarily has this right), as well as the right to delete documents, except invoices if he is not an administrator (any modification to a document is archived and logged).
+**Force invoice number** : grants the right, after deleting a document, to regenerate a document with the same number (any changes made to a document are archived and logged)
-**Force invoice number**: gives the right, after deleting a document, to re-generate a document with the same number (any modification to a document is archived and logged)
+**‘Draft’ creation** : restricts the right to create documents to ‘Draft’ status only. A user with this right cannot approve any document; it must be approved by a user with approval rights.
-**"Draft" creation**: restricts the right to create parts to the "Draft" status only. A user with such a right will not be able to validate any part, it will have to be validated by a user with the validation right.
+**Maximum discount** : allows the total discounts on a document to be limited to a maximum percentage
-**Max discount**: allows you to limit the total discounts of a part to a maximum percentage
+It is possible to**restrict** access to any type of document, on a per-type basis. For example, you can restrict access to invoices but allow access to quotations.
-It is possible to **prohibit** access to any type of room, type by type. For example, you can prohibit access to invoices, but allow access to quotes.
+:TIP: If you restrict a user’s access to all or some document categories, it is recommended that you also disable their access to statistics, through which they might be able to view information relating to the documents.
-:TIP: If you deny a user access to all or some of the coin categories, it is recommended to also disable their access to statistics, through which they could have access to information regarding the coins.
+**Restrict editing** allows you, for the selected document types, to prevent the user from editing or deleting a document once it has been sent.
-**Restrict modification** allows, for the selected part types, to prohibit any modification or deletion of a part by the user, if the part has been transmitted.
+==== ‘Activities’ tab ====
-==== Others tab ====
+It is possible to define certain additional specific privileges.
-It is possible to define certain additional special privileges.
+{{fr:wiki:utilisateurs:privileges_03.png?nolink|}}
-{{:fr:wiki:utilisateurs:privileges_03.png?nolink|}}
 == Contacts ==
-**Show only professional contacts** restricts the display to professional contacts only, in the contact list (excluding personal contacts, therefore).
+**Show business contacts only** restricts the display to business contacts only in the contact list (thus excluding personal contacts).
-==Gestan Web==
-**Allow external deletion** allows you to give permission to delete recordings from external applications (Gestan Web and mobile applications for Gestan)
+In the contact record, there is a tab for administrative details and a tab for business information. Access rights for these two tabs are configured independently, using the drop-down menus **Administration** and **Sales**.
 == Products ==
-**Hide purchase prices** prohibits the display of product purchase prices, as well as the use of the margin calculation screen.
+**Hide purchase prices** prevents the display of product purchase prices, as well as the use of the margin calculation screen.
+If the **‘Prohibit price changes’**, users will no longer be able to change product prices.
+== Projects ==
+** Create projects/tasks ** : allows the creation of projects or tasks.
+**Assign tasks** : allows you to assign and remove tasks from users.
+**Manage time entries** : allows you to add or update other users’ working hours.
 == Interventions ==
-**Administer inters** gives the right to delete a signature on a signed intervention, with a view to modifying it after signature (it will therefore be necessary to re-sign it). If the user is admin, he automatically has this right.
+**Manage work orders** gives the right to remove a signature from a signed service call, in order to amend it after signing (it will therefore need to be re-signed). If the user is an admin, they automatically have this right.
-**Add ingredients** gives the right to add ingredients after signing an intervention by the customer.
-== Projects ==
+==== ‘Other’ tab ====
-** Create projects/tasks **: allows you to authorize the creation of projects or tasks.
-**Assign tasks**: allows you to assign and unassign tasks to users.
+{{fr:wiki:utilisateurs:privileges_04.png?nolink|}}
-**Administer consumption**: allows you to add or update the work times of other users.
+== Gestan Web==
+**Allow external deletions** allows you to grant permission to delete records from external applications (Gestan Web and mobile apps for Gestan)
-=== Others ===
+== Other privileges ==
-**Execute a procedure**: allows you to execute a [[es:wiki:outils:compilproc|compilable procedure]].
-**Accounting settings**: gives access to accounting settings to a non-administrator user.
+**Export prohibited** : prevents data from being exported (to a spreadsheet or word processor) via the tables’ context menu.
-**HR functions **: gives access to human resources management functions to a non-administrator user.
+**Run a procedure** : allows you to run a [[en:wiki:outils:compilproc|compilable procedure]].
-**Production feature**: not currently used.
+**Accounting administration ** : grants a non-administrator user access rights to the accounting settings.
+**HR functions ** : grants a non-administrator user access to human resources management functions.
+**Production function** : not currently in use.
+**Restrict outside working hours** : prohibits the use of Gestan outside the normal working hours defined for the user.
+**Authorised IPs** : IP addresses of the machines from which the user is authorised to connect (up to 3 machines).
 -----------------
-{{:wiki:tags:voir_aussi.gif?nolink |}}**Other Users articles**
+{{wiki:tags:voir_aussi.gif?nolink |}}**Other “Users” articles**
+<nspages fr:wiki:utilisateurs -nbCol=2 -textPages="" -h1 -r -simpleLineBreak >
-<nspages en:wiki:utilisateurs -nbCol=2 -textPages="" -h1 -r -simpleLineBreak >