Permission Settings

12078

I. Account Set Permissions Configuration

Function Description

The account set permissions configuration feature allows enterprise administrators to configure different access and management permissions for different users, ensuring data security and operational compliance.

Operation Steps

Access the Account Set Management Page: First, click on the "User Avatar" in the main menu, select "Account Set Management," and enter the account set management page.
Select Modify Account Set: In the account set list, find the account set for which permissions need to be configured, and click the "Modify" button on the account set to enter the "Modify" window.
Set Account Set Administrators and Members: In the account set modification window, you can set the "Account Set Administrator" and "Account Set Members." The account set administrator typically has full control over the account set, including modifying account set settings and adding account set members. Account set members may have different access and entry permissions based on their roles.

Notes

Only users designated as "Account Set Members" can view the corresponding data of the account set and enter vouchers for the account set.
In addition to viewing and entering data, account set administrators can also "modify" account set settings and add or delete "Account Set Members."
Currently, the system does not support account set viewing roles, meaning roles that can only view the account set but cannot modify any data. This feature is planned for future implementation.

II. System Administrator Configuration

Function Description

The system administrator configuration is to grant global management permissions to specific users, who will have access and management permissions for all account sets.

Operation Steps

Due to the high level of system administrator permissions, it is usually not set through the system's UI interface but rather by directly operating the database.

Access the Database: Use a database management tool (such as Navicat) to connect to the project's database.
Add System Administrator Permissions: In the database's _user_group_role table, add a record to associate a specific user (e.g., the user with userId 'test01') with the system administrator group (e.g., groupId 'adminGroup') and assign them a global role (set roleId to '--' to indicate a global role).

sql copy code
    INSERT INTO `_user_group_role` (`userId`, `groupId`, `roleId`) VALUES ('test01', 'adminGroup', '--');

Notes

Users set as system administrators will have access and management permissions for all account sets, so operations should be performed with caution, ensuring the user is trustworthy.
Directly operating the database requires a certain level of database knowledge and skills; it is recommended to be performed by professionals familiar with databases.
Before adding system administrator permissions, ensure that the user actually exists and that their userId is correct.

## I. Account Set Permissions Configuration

### Function Description

The account set permissions configuration feature allows enterprise administrators to configure different access and management permissions for different users, ensuring data security and operational compliance.

### Operation Steps

1.  **Access the Account Set Management Page**: First, click on the "User Avatar" in the main menu, select "Account Set Management," and enter the account set management page.  
2.  **Select Modify Account Set**: In the account set list, find the account set for which permissions need to be configured, and click the "Modify" button on the account set to enter the "Modify" window.  
3.  **Set Account Set Administrators and Members**: In the account set modification window, you can set the "Account Set Administrator" and "Account Set Members." The account set administrator typically has full control over the account set, including modifying account set settings and adding account set members. Account set members may have different access and entry permissions based on their roles.

### Notes

-   Only users designated as "Account Set Members" can view the corresponding data of the account set and enter vouchers for the account set.  
-   In addition to viewing and entering data, account set administrators can also "modify" account set settings and add or delete "Account Set Members."  
-   Currently, the system <font color="red">does not support</font> account set viewing roles, meaning roles that can only view the account set but cannot modify any data. This feature is planned for future implementation.

## II. System Administrator Configuration

### Function Description

The system administrator configuration is to grant global management permissions to specific users, who will have access and management permissions for all account sets.

### Operation Steps

Due to the high level of system administrator permissions, it is usually not set through the system's UI interface but rather by directly operating the database.

1.  **Access the Database**: Use a database management tool (such as Navicat) to connect to the project's database.  
2.  **Add System Administrator Permissions**: In the database's `_user_group_role` table, add a record to associate a specific user (e.g., the user with `userId` 'test01') with the system administrator group (e.g., `groupId` 'adminGroup') and assign them a global role (set `roleId` to '--' to indicate a global role).

```
sql copy code
	INSERT INTO `_user_group_role` (`userId`, `groupId`, `roleId`) VALUES ('test01', 'adminGroup', '--');
```

### Notes

-   Users set as system administrators will have access and management permissions for all account sets, so operations should be performed with caution, ensuring the user is trustworthy.  
-   Directly operating the database requires a certain level of database knowledge and skills; it is recommended to be performed by professionals familiar with databases.  
-   Before adding system administrator permissions, ensure that the user actually exists and that their `userId` is correct.