Re: Form Role not allowing section to be viewed by AD Group

appelgw — Wed, 22 Sep 2010 00:24:29 GMT

Problem resolved.

Testers beware! Don't run over your own login account's security group membership when testing form roles!

I kept seeing the 'Managers' section whenever I launched the form. I'd change settings to something I didn't think was right, and I wouldn't see them anymore. Good right?
Nope. I'd have a manager test it after the last change and they couldn't see their section either. Back and forth again and again.... so frustrating.

It turns out that I happen to belong to the AD Group that I was using as my Role definition. I thought I was a user, but in reality my account is a 'manager'.
I finally figured this all out when I started "real-world" testing with my dummy user account on a second pc.

Lesson learned: When applying role definitions to the display criteria of sections, go with what makes sense first, and test it on a stand-alone pc and account. Don't let your own account's security membership cause confusion during the testing phase. <applicable to small 1-man shops like mine>.

Form Role not allowing section to be viewed by AD Group

appelgw — Tue, 21 Sep 2010 15:50:13 GMT

I have a nice Leave Request form that is working great, except for one item. User Roles. I have two roles - Submitter (initiator) and Management,

For the Submitter role I have it set to use a group, and the group entered is <domain>\All Users (which does exist in our AD).

For the Management role I have it set to also us a group titled <domain>\Management that also exists in our AD.

Both the All Users and Management AD groups are 'Security' groups (not distribution) and contain both users and other AD groups.

Now for the problem.

Passes: When a user creates or reopens their form, they do not see the sections that have the <Display> <conditional formatting> set to:
<User's current role> <is not equal to> <Management> = <Hide this control> which is expected.
Fails: When a member for the AD Management group opens the form they DO NOT see these sections (they should).

However, when I change the role so use individual names instead of groups - the individuals CAN see the sections.

I can't understand why the AD groups assigned to the Role are not able to see the sections.

Newbie Questions

Re: Form Role not allowing section to be viewed by AD Group

Form Role not allowing section to be viewed by AD Group