search

mendix / docs

Mendix documentation repository
https://docs.mendix.com
Creative Commons Attribution 4.0 International
141 stars 718 forks source link

configuring-a-workflow-in-studio-pro-for-the-employee-onboarding-process #8424

Open MichaFriede opened 1 week ago

MichaFriede commented 1 week ago

Please use the form below, leaving the prefilled data to help us. Thank you.

Page link: configuring-a-workflow-in-studio-pro-for-the-employee-onboarding-process

Document link: workflow-how-to-configure.md

My Issue/Suggestion

There are two "best practice violations"

  1. Chapter 3.3 4c: Default rights are best kept to None (picture Read is checked), because you are then forced to think about granting access to new attributes
  2. Chapter 3.3 6b: Best practice is to separate access rights per module role.
Yiyun333 commented 2 days ago

@MichaFriede Thanks for the feedback!

I agree with bullet point 1 and will update the screenshot.

As for bullet point 2, indeed, generally speaking, it's best to separate access rights per module role. However, when the access rights for several module roles are exactly the same, isn't it more efficient to configure the access rights of those module roles at the same time? I am not sure about any technical influence here though. Is it more risky somehow in terms of security reasons?