As part of Start of approval route process, access rights to the main object will be given:

• Reading to all designated approvers

• Editing and deleting to the first approver from the list of approvers.

  

And the distribution of access rights to read / edit the selected visa will be performed:

• Reading of all visas is available to the performer and all appointed approvers;
• Primary editing is available to the performer and is provided to the approver at the time of taking the visa in work;
• Deleting the record is not available.

Insert visa

Approval mechanism has an automatic distribution of access rights.

<aside> 💡 Note: If the record, for which rights are being distributed doesn’t have record-based administration enabled, nothing happens. Access rights to the record are not set because there is no need.

</aside>

• AddRefEntityOwnerEditRights
• AddVisaOwnerInitRights

Update visa

• OnChangedStatus (status change):
• SetRightsOnOwnerChange (change [VisaOwnerId]):

Delete visa

• Remove editing rights of the record that is in approving from the user in the [VisaOwnerId] field.

  <aside> 📢 Important: Only if user doesn’t have visas in [In work] status.

  </aside>

• Read permissions are removing from the user in the [VisaOwnerId] field on the approved record