What is it?
This update strictly enforces permissions across the platform, ensuring that only authorized users can perform company management actions.
Why is it important?
This change is critical for maintaining data integrity, security, and proper access control within Alvys. It ensures that:
Security: Only users with designated permissions can create, edit, or activate company profiles.
Data Accuracy: Prevents unauthorized or accidental changes to critical company data.
Workflow Compliance: Aligns system behavior with intended user roles and responsibilities.
How is it used?
Users require specific permissions to perform company management actions. If a user attempts an action (like creating a new company or editing a company profile) without the necessary permissions, they will be blocked and see a clear "Insufficient permissions" message.
Specifically, the following functionalities now strictly require the associated permissions:
#/companies(Companies List Page):"Import Companies" button: Requires
EditCompanypermission."Create New Company" button: Requires
EditCompanypermission.#/companies/{id}/edit(Company Details Page):Status change dropdown: Requires
ActivateCompanypermission.Most other fields on the page (except Account Team): Require
EditCompanypermission."New Company" / "Edit Company" buttons in various workflows:
New Load Wizard (including Rate Confirmation flow): Requires
EditCompanypermission.Accept Tender dialog: Requires
EditCompanypermission.Load Details Page (LDP): Requires
EditCompanypermission.Create new/edit Template: Requires
EditCompanypermission.
Who has access?
All Alvys users are affected by this permission enforcement. Users will only be able to perform Activate Company and Edit Company actions if their assigned role explicitly grants them the "Activate Company" or "Edit Company" permissions, respectively.