Matter Permissions

Table of Contents

1. Overview
2. Making a matter private
3. Who always keeps access
4. Configuration Reference

---

Overview

A new matter gets the default permissions from the Security settings. A matter can also be made private, in which case only the selected users and roles — plus a small set of users that is always kept — may access it.

All settings mentioned here are in the Matter section of the CRM Configuration screen.

Making a matter private

1. Set ShowUsersGroupsPermissions to Visible or Required. This adds the Permissions field to the matter.
2. Optionally limit who sees that field with ShowUsersGroupsPermissionsRole — see Matter Configuration.
3. On the matter, select the users and/or roles that may access it. Which of the two the user can pick from is set by ShowUsersGroupsPermissionsFilterType.

As soon as one or more users or roles are selected, the matter is private: only those principals have change permission on it. Clear the field again and the default permissions from the Security settings are re-applied.

Who always keeps access

When a matter is made private the following are added automatically, also when a user removes them from the field:

• The user saving the matter
• The responsible timekeeper (unless that field is hidden)
• The billing timekeeper (unless that field is hidden)

On top of that, two settings add fixed principals to every private matter:

• ShowUsersGroupsPermissionsAdditional — gets owner permissions
• ShowUsersGroupsPermissionsAdditionalReadPermissions — gets read permissions

---

Configuration Reference

ShowUsersGroupsPermissions

Shows the Permissions field on a matter, which is what allows a matter to be made private.

• Allowed values: NotVisible, Visible, Required, Automatic
• Default: NotVisible

ShowUsersGroupsPermissionsRole

Users, roles and matter owners that may see the Permissions field. Separate multiple values with a semicolon; empty means everyone sees it.

• Allowed values: a role name, a user name, Owner, OwnerSub
• Default: empty

ShowUsersGroupsPermissionsFilterType

What the user may select in the Permissions field.

• Allowed values: User, Role, UserRole (any other value, including empty, also means users and roles)
• Default: UserRole

ShowUsersGroupsPermissionsAdditional

User names and role names that always get owner permissions on a private matter. Separate multiple values with a semicolon.

• Default: empty

ShowUsersGroupsPermissionsAdditionalReadPermissions

User names and role names that always get read permissions on a private matter. Separate multiple values with a semicolon.

• Default: empty