Skip to content

Editing deal permissions

The Permissions dialog on a deal edits who can view, edit, delete, and administer that deal — the object-level ACL described in the permissions matrix. It is opened from the deal's action menu (shown with edit permission on the deal).

This dialog edits the deal's own access rules. Per-term visibility inside the deal is a different mechanism — element permissions, edited on each element (Editing deal content).

Steps

  1. Open the deal's action menu → Permissions. The dialog has four tabs: View, Edit, Delete, Admin.
  2. On a tab, search for a role. Matches are of three kinds: groups, companies (by known-as name), and contacts (by email). Selecting one adds it to the Any column.
  3. Drag entries between the three columns to set the rule type:
  4. Any (OR) — holders of any listed role qualify.
  5. Must (AND) — every listed role is required.
  6. Not — holders of a listed role are denied.
  7. Save. The rules replace the deal's previous rules for all four privileges at once, and the deal is re-indexed so search results respect the change immediately.

How the rules behave

  • A privilege with no rules at all falls back to the site defaults: by default view is open to any authenticated user, and edit/delete/admin require the superusers role.
  • A grant only ever comes from an Any match; Must and Not can only restrict (rules with only Must/Not entries deny everyone).
  • Deal statuses and email actions write to these same rules: sending to the negotiator adds their email to view; sending to the supplier adds member and the supplier company name to view. Expect entries you didn't add by hand.

If it fails

  • Removing an entry from a "Not" column doesn't work — a known front-end bug: the Not column's delete button targets a nonexistent list. Workaround: drag the entry to another column, delete it there, then save.
  • A user still sees the deal after being removed — check the site default rules and the other roles the user carries (company name, email, groups): any Any match grants access.