PO Line and invoice attachments: Upload/View/Edit/Delete - additional user roles needed
It is possible to upload attachments to a PO Line or an invoice. These attachements can be viewed, edited and deleted as well.
In case of using Alma as (the only) data storage for e.g. invoice PDFs, it is very important that attachments can be deleted only by specially privileged staff users. Deletion might be necessery e.g. because of erroneous uploads.
Looking into the 'Roles Reports' shows that there is no 'Delete' option listed (so Edit means also Delete):
Purchasing Operator / Purchasing Manager
- polineattachments.xml ... View Edit
- po_attachments.xml ... Edit
- invoiceattachmentstab.xml ... View
- polineattachments.xml ... View
- po_attachments.xml ... View
Purchasing Operator Extended
[nothing for attachments]
Invoice Operator / Invoice Manager / Invoice Operator Extended
- invoiceattachmentstab.xml ... View Edit
- polineattachments.xml ... View Edit
- invoiceattachmentstab.xml ... View
- polineattachments.xml ... View
- po_attachments.xml ... View
The 'Delete' and 'Edit' options should be removed from user roles which are allowed to upload and view attachments.
The 'Delete' option should be be an own user role. Alma already has this differentiation in other areas, e.g.:
- Purchase Request Operator Extended (Delete purchase requests)
- Selector Extended (Delete purchase requests)
- Cataloger Extended (additional delete privilege)
- Physical Inventory Operator Extended (additional delete privilege)
- Electronic Inventory Operator Extended (additional delete privilege)
Christian
shared this idea
-
François Renaville
commented
I agree with this suggestion.
I think it should not only be limited to the PO Line and invoice attachments, but to all attachments in general in Alma. I find it really odd for example that someone with a Circulation Desk Operator - Limited role can delete attachments from a User record tab.