Carrer Yuri wrote at 2003-12-10 09:36 +0100:
... Each folder is "managed" by a responsable.
Use a local role for "responsible" in "his" folder, maybe "Manager".
A costumer come in, choose which folder (department) want to submit a request, and does its request. The request (a folder with property set with the input data contained in the dept folder he choosed) has to:
- be seen only by the costumer when he came back and the responsable of that dept.
Restrict the "View" permission to "Manager" (or whatever you used as local role above) and "Owner".
- be edited only by folder responsable and created by the costumer
Restrict modification permission (these may be more than one depending on your objects) to "Manager" (or whatever) and "Owner"
- be seen by a global manager, which can read and write all the depts and do statistics.
Make him "Manager". -- Dieter