<?xml version="1.0" encoding="utf-8"?>
<ManualTopic ID="/baanerp/tt/onlinemanual/000055" xml:lang="en">
	<Header>
		<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">To define database authorizations</Title>
		<Keyword ContextSensitive="No"><Level1>User authorizations</Level1>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>Roles</Level1>
		</Keyword>
	</Header>
	<GeneralSection><Paragraph class="Default">Normal users have only restricted authorizations in <GUIRef href="/baanerp/tt" role="package">Tools</GUIRef>. The authorizations that a group of users, who are linked to a role in an organization, has for a database, are defined in the <Link href="/baanerp/tt/glossary/glossary#100002" role="glossary">database authorizations</Link>. They contain a set of sessions that can be used to print, display, maintain, and convert the authorizations for a specific table or table field.</Paragraph>
		<Paragraph class="Default">The type of authorizations must also be specified for all database authorizations. For example, read, update, insert, delete, or not authorized. <GUIRef href="/baanerp/tt" role="package">Tools</GUIRef> uses this data to determine if a user is authorized to perform database actions on tables or table fields. If no database authorizations are specified for a user, the user has no database permission at all.</Paragraph>
		<Paragraph class="Default">You can specify the database authorizations for specific companies, or for all companies. The authorizations for a specific company have the highest priority.</Paragraph>
		<List><ListIntro>You can specify the database table authorizations at several levels. For example:</ListIntro>
			<ListItem>At company level. Exceptions can be maintained at package, module, table, and table data level.</ListItem>
			<ListItem>At package level. This is an exception to the company level, and exceptions can be maintained on a module, table, and table data level.</ListItem>
			<ListItem>At module level. This is an exception to the company and package level, and exceptions can be maintained at table and table data level.</ListItem>
			<ListItem>At table level. This is an exception to the company, package and module level, and exceptions can be maintained at table data level.</ListItem>
			<ListItem>At table data level. This is the most specific authorization.</ListItem>
		</List>
		<List><ListIntro>You can also specify the database table field authorizations) at several levels. For example:</ListIntro>
			<ListItem>At form field level. Exceptions can be maintained at form field data level.</ListItem>
			<ListItem>At form field data level. This is the most specific form field authorization.</ListItem>
		</List>
		<Paragraph class="Default">The authorization that is stated at the most specific level has the highest priority. For example, the table authorizations per table data, for a specific company. The authorization that is stated at the most global level has the lowest priority. For example, the table authorizations per company for all companies.</Paragraph>
		<Paragraph class="Default">You can define conditions and expressions to, for example, limit the authorizations for a form field for a group of users who are linked to the role. Define the expressions in the <GUIRef href="/baanerp/tt/ams/ttams3146m000" role="session">Table Field Data Authorizations (ttams3146m000)</GUIRef> session, or in the <GUIRef href="/baanerp/tt/ams/ttams3145m000" role="session">Table Data Authorizations (ttams3145m000)</GUIRef> session.</Paragraph>
		<ExampleSection><SectionTitle>
                                 Example
                              </SectionTitle>
			<Paragraph class="Default">Expression : ttaad200.user between dwatson and sholmes.</Paragraph>
		</ExampleSection>
		<Paragraph class="Default">This means that the user cannot access the ttaad200 table for users between dwatson and sholmes.</Paragraph>
	</GeneralSection>
	<RelatedTopics><SectionTitle>
                              Related topics
                           </SectionTitle>
		<RelTopic><Link href="/baanerp/tt/onlinemanual/000052" role="manual">To define authorizations</Link>
		</RelTopic>
		<RelTopic><Link href="/baanerp/tt/onlinemanual/000053" role="manual">To define templates for AMS</Link>
		</RelTopic>
		<RelTopic><Link href="/baanerp/tt/onlinemanual/000054" role="manual">To define session authorizations</Link>
		</RelTopic>
	</RelatedTopics>
</ManualTopic>
