Denety Consulting All articles

Security & audit7 min read

Intelex rights vs permissions: why hierarchies break

Three hierarchies run through an Intelex environment: the permission chain from application down to field, object relationships from a parent object to its related objects, and the location tree from login location through the active location to each object's location filter.Three hierarchies run through an Intelex environment: the permission chain from application down to field, object relationships from a parent object to its related objects, and the location tree from login location through the active location to each object's location filter.

A supervisor at your Hamilton plant opens an incident and finds every field grayed out. A coordinator at the same plant says she cannot see Hamilton records at all. Both tickets reach the same administrator, and both get the same first answer: "I'll check her permissions."

That answer is wrong about half the time. Intelex rights vs permissions is a real distinction: two mechanisms, different capabilities, and neither of them decides whether a record appears in a list. Location does that. Get all three straight and most access tickets close in ten minutes.

Rights allow only, never deny granted to employee groups apply to the object, not the record skip record-level inheritance no child objects Permissions allow or deny resolve at record level closest to the record wins deny beats allow at the same level inherit to child objects Never both on the same object Setting rights on an object that already uses permissions is where hierarchies break
Two separate systems, not two settings of one. They cannot coexist on the same object, and the failure people report as "the hierarchy is broken" is almost always a right applied where a permission was already doing the work.

What are rights in Intelex?

Rights are the fast, blunt mechanism. Their limits are specific:

Free

Read every article, in full.

  • Every article on the site, start to finish
  • Sources cited and linked on all of them
  • New pieces on Intelex configuration and EHS practice

Work email addresses only. Privacy.

Would rather not sign up? Email me and I will send it over.