Configuring Action Visibility by Role

[BF_13811900]

Version: Windchill 13.0

Use Case: I am using two groups within the context of a product in my Windchill instance. One group is a member of the "Members" role and one group is a member of the "Designer" role. None of these roles have the "Rename" action enabled in the "Configure Actions for Roles" table.

Description:

Both groups are able to see an option for "Rename" in the "Actions" menu of a part instance contained within my product. Both groups are members of a license profile which provides the "Rename" action to them. However, according to https://www.ptc.com/en/support/article/CS110240?source=search , "Configure Actions for Roles setting will override Profile setting". The groups I have referred to are not assigned to any other role which has the "Rename" action enabled. Can anybody explain why users in these groups may be able to see the "Rename" option?

[BrianToussaint]

Do these roles have Modify Identity available to them?  I am going through the same thing with another area of the interface. I have an open support call and am waiting to hear back.  But it seems that ACLs might override them all.

[BF_13811900]

Hi Brian, that's a very good point. My Windchill instance is not available at the moment but I will check that and get back to you. Thanks very much. Would be keen to hear what PTC have to say to you about it.

[BrianToussaint]

I got a reply back today from PTC Tech Support that I had to "deny" the roles for Team.  However I have a customized interface for creating changes that needs to have that set to be able to create the notice and task.  I wrote back to them that logic was backwards and that if the ACLs controlled it, then this other was useless.  Profiles and Configuring Actions for Roles should override the ACL.  The ACL just says if it is doable or not.

I am interested in what PTC has to say on why this is so.

[Fadel · Accepted solution]

for action visibility , the best option is to use standard profiles , it controls actions and IBAs visibly 

https://support.ptc.com/help/windchill/r13.1.1.0/en/index.html#page/Windchill_Help_Center/profilemgmt/ProfileMgmtActionsTableRef.html#wwID0EOW2U 

[BrianToussaint]

Hello @Fadel  I have configured my profile and these are still showing up.  The Teams definition in the ACL is overriding everything.  Support told me that I needed to Deny Modify at the ACL level for Teams.  This then bypasses what is in the profile.  I believe that UI instructions should override ACL and not the other way around.

[BF_13811900]

Thank you