Ramira Access: hide or lock fields, buttons, tabs and menus per group or user

Dolibarr permissions work module by module: a salesman who can read invoices sees the margins, a clerk who can edit third parties can change the customer code, an intern who can create contacts can also delete them. Ramira Access fills the gap, without code.

One rule, several restrictions

Choose the groups and / or the users, then list what they cannot see or do:

• Hide a field: margins, cost price, weighted average price, capital, VAT number, phone, email, any complementary attribute (extrafield)...
• Read-only field: customer code, payment terms, payment method, bank account...
• Hide a button: Delete, Clone, Validate, Re-open, Send by email, Classify paid...
• Hide a tab: buying prices, bank accounts, notes, linked files...
• No creation, no modification, no deletion of a kind of record.
• No export of a kind of record.
• Hide a menu: Bank, Accounting, Billing, HRM, Tools...

Locked for real

• Hidden values are removed by the server before the page is sent: they are not in the html source, not in the banner, not in the list columns.
• Read-only fields and bans are checked by the server: a forged url or form is refused, and the database triggers refuse the change even when it comes from the REST API or another module.
• Hidden fields keep their saved value when the user saves the record: nothing is erased.

Objects

Third parties, contacts, products and services, commercial proposals, sales orders, customer invoices, purchase orders, vendor invoices, projects.

Made for administrators

• Administrators always see everything: nobody locks himself out.
• "View as": every restriction of a user, all rules together.
• Export the rules to a file and import them in another database (test then production).
• English, French and Spanish.
• No change of any Dolibarr file: hooks and triggers only.

Compatibility: Dolibarr 22, 23 and 24. Tested on 22.0.5, 23.0.4 and 24.0.1 (33 automatic checks on each version).

Limits: generated PDF / ODT documents are not filtered. REST API read calls return every field: give API keys only to trusted users.

Support: support@ramira.fr - ramira.fr