Configuring User Permissions

Permissions describe what users can and can't do in XMod. There are general permissions like which users can configure an XMod module (admin's and host's) and more finely tuned permissions that deal with a user's access to data. We're concerned with the latter group in this topic.

Permissions are handled in two places - at the form level and at the module level. Most permissions are set at the form level and you'll find them in the Form Settings and Permissions panel when adding or editing a form (See Manage Forms).

So, you manage permissions in the same place you manage your forms - the Manage Forms screen (accessible by admins through the Actions Menu). You'll find the permission settings under the text box containing the form's definition.

• Item Approval: Item approval is useful when multiple people are submitting information. Using Item Approval, you can keep submissions hidden from public view until they've been reviewed and/or edited.
  
  You can choose to require that all records added using this form must be approved by a user in one of the "Approval Roles" you select (see below). If you select No Approval Needed, then all records added will automatically be marked as Approved.
   
• Approval Roles: If you choose to require approval, you must select at least one role whose members are responsible for approving submitted items.
   
• AutoApprove Roles: You may find that some people are quite capable of submitting valid items that don't need a formal review. When members of AutoApprove Roles add an item, those items will automatically be marked as approved.
   
• Add-User Permissions: (New to Version 3.0) Sometimes you need even more finely tuned control over the process. When a user adds an item (referred to as an "add user"), you can choose to allow that person to edit and/or delete their submission prior to approval or you can prevent them from editing and/or deleting their submission. The same type of permissions are available after the item has been approved.
  
  For example, you can allow a user to edit his/her submission before it's been approved - and even delete it.  However, after it's been approved you can prevent the user from changing their submission.
  
  If you decide to allow the user to edit their record after it has been approved, you have the option of resetting the approval flag after the record's been edited.
  
• Add Users: (New to Version 4.0) While it is often possible to determine who can add records for a given form by modifying the DNN permissions for a given module, XMod has simplified the process by enabling you to specify - on a module-by-module basis - who can add records. This is set on the "Configure XMod Module" page, on the Security tab.