01.06.2018

How to configure user access rights in a standard configuration of "1C: Enterprise Accounting" edition 3.0 so that each user can create, view and edit documents of only certain organizations.

Naturally, this creates a need for some users to be given the opportunity to work on behalf of only one or several strictly defined organizations and to limit access to data from other organizations.

In programs on the 1C:Enterprise 8.3 technology platform, this problem is solved using the mechanism for restricting data access at the RLS record level, which can be deciphered as Record Level Security (record level security) or Row Level Security (row level security).

Previously, this mechanism had to be built in configuration mode with the help of programmers. In the standard configuration of "1C: Enterprise Accounting" edition 3.0, the functionality of the access restriction mechanism across organizations is already included in the standard functionality and can be enabled and configured by an ordinary user (with administrator rights) independently without the help of specialists.

This method of setting up RLS access rights by organization can be used in the standard configuration "Enterprise Accounting" edition 3.0, both in the local version installed on the user's computer and in the cloud version of 1C: Accounting.

Let's look at setting up RLS using the example of a standard configuration of "1C: Enterprise Accounting 8" edition 3.0 ("Taxi" Interface).

Initial data.

There is an information base in which records are kept of four organizations, of which one is an individual entrepreneur and three are LLCs (see figure)

This information base will have one Administrator and three users: a chief accountant, one department head and a sales manager.

You need to configure user rights as follows:

Settings

The first step is to enable the ability to differentiate access rights by organization. To do this, in the "Administration" section, select "Setting up users and rights"

In the form that opens, in the “Access groups” subsection, check the box next to “Restrict access at the record level.”

Please note that enabling this mechanism for separating rights can lead to a significant decrease in the speed of the system (especially if it was not working quickly before) and increased performance requirements for the computer and server equipment used.
The reason for the decrease in operating speed is that additional selections are added to standard queries when accessing data, and each time the user accesses any information base data, the program will carry out additional checks.
Therefore, before enabling this setting, we recommend that you first check its effect on the speed of the program on a test copy of your infobase.

After this, in the “Users” directory, select the user whose rights we will configure and click the “Access Rights” button.

The "Administrator" profile allows access to all data of all organizations; additional configuration of administrator rights is not required. The system must have at least one user with administrator rights.

First, let's set up the rights of the chief accountant "Ivanova Anna Sergeevna", who needs to be given full access to all organizations.

The rights settings window will open.

You must select the user profile "Chief Accountant".

The chief accountant must have full access to all organizations, so in the right window, in the “Access Value” column, select “All allowed.”

To be fair, it can be noted that the “Chief Accountant” could be assigned “Administrator” rights - this would automatically give access to the data of all organizations, but then the Chief Accountant would also have system administration items in the interface.
This can be done if there is no separate administrator and his role is played by the chief accountant, but you should not assign more than one role to one user.

If the configuration describes several roles with record-level access restrictions (RLS), we do not recommend assigning more than one such role to one user (for example, accountant and HR officer), because when all queries are executed, the conditions of both RLSs will be added to their conditions using logical OR, which can lead to a decrease in the speed of query processing and, ultimately, the entire program

If the settings are made in the cloud service "1C:Fresh", then when saving the settings, the program may request confirmation of changes in access rights, for which you will need to enter the password of the user on whose behalf the settings are being made.

The next user is Vladimir Ivanovich Popov, who needs to be given full access to the documents of one organization "IP Popov V.I."

Restricting access to data can be configured in two ways: according to the “white” or “black list” principle, i.e. the user can configure access to the list of allowed organizations and then the user will have access to the data of the organization that is listed in this list, or vice versa, configure the list of prohibited organizations and then the user will have access to the data of all organizations in the information base, except for those specified in this list.

Select the “Chief Accountant” profile, in the “Type of access” column in the upper right window, select “All prohibited”. After that, in the “Allowed Values” window, click the “Add” button and select IP Popov V.I. from the drop-down menu.

Save the settings.

Let's move on to setting up the rights of the next user, Petr Nikolaevich Sidorov, who needs to be given access only to the extract of primary documents of the sales department on behalf of only two organizations: Leader LLC and Furniture Man LLC.

Select the “Sales Manager” profile. Select the access value “All denied”. In the “Allowed Values” window, first select LLC “Leader”, and then click the add button again and select the second organization LLC “Furniture Man”.

Save the settings.

If this information was useful to you, then like the article on social networks and share the link on your favorite forums))).

Online Company, 2018

How to configure user rights by organization in 1C: Accounting Enterprise edition 3.0, Limiting user access rights at the record level to data of only one organization in 1C: Accounting using the RLS (Record Level Security) mechanism, The user should see documents only of his organization in a multi-company information base 1C:Accounting, How in 1C:Accounting can I use the mechanism for restricting access at the record level (RLS - Record Level Securiy) to configure user rights to documents of only one organization? Setting up a mechanism for separating rights at the RLS (Record Level Security) record level in 1C: Accounting 8.3. In an enterprise, in one information base of the 1C: Enterprise Accounting 3.0 configuration, records are kept for several organizations and database users need to configure access so that each user can see documents of only the necessary organizations? How to allow a user to access data from only one organization in 1C: Accounting 8.3, Configuring the RLS system to limit user rights to access documents of only one organization in the 1C: Enterprise Accounting version 3.0 configuration, How to configure access restriction at the level of RLS records in a typical 1C configuration :Accounting 8.3, Access restrictions by organization in 1C:Accounting 8.3. using the RLS mechanism, How to configure user access rights to data of only one organization in 1C: Accounting 8.3, How to hide organizations for some users in 1C: Accounting 8, Setting up the RLS (Row Level Security) system in 1C: Enterprise Accounting edition 3.0, Restricting access to data of only one organization for a specific user in 1C: Accounting 8.3, How to configure user access rights by organization in a typical configuration of 1C: Enterprise Accounting edition 3.0, How to enable the ability to configure access restrictions at the record level in typical configuration of 1C: Enterprise Accounting rev.3.0, How to allow a user access to documents of only one organization in multi-company accounting in 1C: Accounting, How to configure user access rights to documents of only one organization in the 1C: Enterprise Accounting 3.0 configuration, Setting up the RLS (Record) system Level Security - restriction of rights at the record level) in the 1C: Enterprise Accounting ed.3.0 configuration, Configuring RLS mechanisms to limit a user's access rights to data of only one organization in the 1C: Enterprise Accounting ed. 3.0, Restricting access to documents of only one organization for a specific user in 1C: Enterprise Accounting 3.0, How to hide documents of one organization in a common 1C: Accounting database for one user, Several organizations are kept in one 1C: Accounting information base, how to set up RLS to could the user see documents only from his organization? An enterprise maintains multi-company accounting in one 1C:Accounting information base, and database users need to configure access so that each user can create, view and edit documents of only certain organizations? How in 1C: Accounting 8.3 using the RLS mechanism (Record Level Security - restriction of rights at the record level) to configure a restriction of document visibility for a specific user in the context of selected organizations?

There are a lot of possibilities in the 1C: Enterprise Accounting 8 edition 3.0 program, so before starting work we need to configure the functionality of the program. This is necessary in order to “unload” our workspace so that only those objects and documents with which we work are present in the program. But at the same time, we must be able to make all the necessary operations, so we should be careful about the settings and not miss anything.

The functionality is configured in the “Main” section, the “Settings” tab, the “Functionality” item

The program offers us to choose one of three settings:
- main,
- selective,
- full.
“Basic functionality” – displays only the most popular accounting sections, is most suitable for small businesses and has a simple set of documents.
“Full functionality” – automatically displays all the program’s capabilities.
“Custom functionality” – intended for those who want to independently install the necessary program functions.
In our example, let’s set “selective functionality” and go through the tabs, independently choosing which functions we need and which we will not use.

Let's start with the “Bank and cash desk” tab. We check the “Cash documents” checkbox, we remove the “Collection” checkbox, since we will not carry out such an operation. Next, enable “Payment cards”. We do not work with “Payment requirements” and “Fiscal registrar”, so we turn off the checkbox.

The next tab is “Inventory”. Here we are interested in “Workwear and special equipment”, “Imported goods” and “Product components”.
We will not use the “Returnable packaging” option; we will remove the checkbox.

On the “Fixed Assets and Intangible Assets” tab, check the “Fixed Assets” and “Intangible Assets” checkboxes, since we will have these transactions. In this case, the OSiNMA section will appear on the left side of your panel.

On the “Calculations” tab, in our case we will leave all the checkboxes enabled, they will be useful to us.

The largest trading functionality. Here we need to include what we will take into account in our trading activities. We leave the “Retail trade”, “Shipment without transfer of ownership”, “Corrective and adjustment documents” and “Delivery of goods by road” checkboxes. We will not use the remaining options.


And the last tab is “Production”. If you have production operations, then you need to check the box.

That's it, we have configured the functionality. I want to say that you don’t need to be afraid to work with the functionality of the program, since you can always change the settings and add display or, conversely, hide objects. However, if you have already worked in the database and performed operations, the program will not allow you to remove settings for those operations that have been carried out. For example, in the program you can uncheck the “Fixed Assets” option, but if fixed assets have already been accounted for and there are transactions for them in the program, then this function cannot be disabled.

In 2012 company "1C" released the basic version of the configuration "Enterprise Accounting" edition 3.0. The new edition contains many changes designed to make working with the program easier and more convenient. Let's take a closer look at these changes.

Main innovations

1) Interface“Enterprise Accounting” has become more visual (Fig. 1). The transition to one or another accounting section is carried out using icons on section panels.

Rice. 1. Interface “1C: Accounting 8” edition 3.0.

The composition of the sections, as well as the order in which they are displayed in the program window, can be easily customized in accordance with the wishes of users and the peculiarities of the enterprise (Fig. 2).

Rice. 2. Setting up the section panel in “1C: Accounting 8” ed. 3.0

In each section the screen displays navigation bar with a list of reference books and documents, which, like the section panel, can be easily changed by removing links to types of documents not used in work.

Editing is also possible for action bars. From the list of commands and reports, you can select the most frequently used ones and place them in the action bar.

2) All objects in the database now have internal links. Having received such a link by email, the user can quickly find the document he needs in the database.

3) Created documents can be opened as in separate windows, and in the general window, but in separate tabs.

4) Using the “History” button, you can view a list of recently created and edited documents (Fig. 3).

Rice. 3. View a list of recently created or edited documents “1C: Accounting 8” edition 3.0.

5) When posting documents, the program checks the correctness of filling out its details, and if an error is made somewhere, it indicates in which field this error is and what it is (Fig. 4).

Rice. 4. Checking the correctness of filling out documents in “1C: Accounting 8” edition 3.0.

6) Sections "Salary" and "Personnel", which were present in the previous edition separately from each other, in edition 3.0 combined into one section “Employees and salaries”. All personnel changes (hiring, relocation, etc.) are now entered not in separate documents, but in the employee’s card. HR orders are also printed from the employee’s card.

7) Salary, personal income tax and insurance contributions are calculated in one document. In version 3.0, postings for personal income tax and insurance contributions are generated automatically when payroll is calculated.

8) In the new edition there are means for protecting personal data in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”. The program monitors requests to personal data of employees stored in the information base (Fig. 5). The list of data accessed by the system is set in the program settings.

Rice. 5. Registration of access to personal data in “1C: Accounting 8” edition 3.0.

In addition, in accordance with the requirements of Federal Law No. 152-FZ, the program generates a document “Consent to the processing of personal data”, and the text of the document is available for editing in the program itself (Fig. 6).

Rice. 6. Creation and editing of the document “Consent to the processing of personal data”

in "1C: Accounting 8" edition 3.0.

9) Edition 3.0 provides function view-only database access, without the ability to edit it. To do this, a new user is created in configurator mode, to whom the database is provided in read-only mode. This function will be useful during audits. As a result, he can independently view all the accounting information he needs, without distracting the accountant from his work, and will be calm about the safety of the data.

10) Long operations (closing the month, generating some reports) can now be performed in the background. This is certainly important from a time-saving point of view.

11) Finally, the MOST IMPORTANT difference between edition 3.0 and edition 2.0 is possibility of working via the Internet according to the modelSaaS(Software -as -a -Service). The work does not require installation of the platform and information databases on the user's computer. The program is launched via a web browser from the website of the company providing such a service.

Thus, you can work in the program from anywhere in the world where there is Internet access. It is convenient, profitable, safe and corresponds to the latest trends in the development of the information technology services market.

The functionality of "1C: Accounting 8" edition 3.0 takes into account all the latest changes in legislation relating to accounting and tax accounting.

Features of the transition to edition 3.0

According to the information letter of the 1C company No. 16076 dated December 29, 2012, the basic version of Enterprise Accounting, edition 3.0, is provided FREE OF CHARGE for registered users of software products:

- “1C: Accounting 8. Basic version”,

- “1C: Accounting 8 OEM”,

- “1C: Accounting 8.0. Basic version",

- “1C: Accounting 8.0 OEM”,

- “1C:Entrepreneur 8”,

- “1C: Simplified 8”.

The transition to the new edition is carried out as an update to edition 2.0 in configurator mode. The 1C company recommends using the 1C:Enterprise 8 platform version 8.2.16 and higher for this.

In 2012 company "1C"released the basic version of the configuration"Enterprise Accounting" edition 3.0. The new edition contains many changes designed to make working with the program easier and more convenient. Let's take a closer look at these changes.

Main innovations

1) Interface“Enterprise Accounting” has become more visual (Fig. 1). The transition to one or another accounting section is carried out using icons on section panels.

Rice. 1. Interface “1C: Accounting 8” edition 3.0.

The composition of the sections, as well as the order in which they are displayed in the program window, can be easily customized in accordance with the wishes of users and the peculiarities of the enterprise (Fig. 2).

Rice. 2. Setting up the section panel in “1C: Accounting 8” ed. 3.0

In each section the screen displays navigation bar with a list of reference books and documents, which, like the section panel, can be easily changed by removing links to types of documents not used in work.

Editing is also possible for action bars. From the list of commands and reports, you can select the most frequently used ones and place them in the action bar.

2) All objects in the database now have internal links. Having received such a link by email, the user can quickly find the document he needs in the database.

3) Created documents can be opened as in separate windows, and in the general window, but in separate tabs.

4) Using the “History” button, you can view a list of recently created and edited documents (Fig. 3).

Rice. 3. View a list of recently created or edited documents “1C: Accounting 8” edition 3.0.

5) When posting documents, the program checks the correctness of filling out its details, and if an error is made somewhere, it indicates in which field this error is and what it is (Fig. 4).

Rice. 4. Checking the correctness of filling out documents in “1C: Accounting 8” edition 3.0.

6) Sections "Salary" and "Personnel", which were present in the previous edition separately from each other, in edition 3.0 combined into one section “Employees and salaries”. All personnel changes (hiring, relocation, dismissal) are now entered not in separate documents, but in the employee’s card. HR orders are also printed from the employee’s card.

7) Salary, personal income tax and insurance contributions are calculated in one document. In version 3.0, postings for personal income tax and insurance contributions are generated automatically when payroll is calculated.

8) In the new edition there are means for protecting personal data in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”. The program monitors requests to personal data of employees stored in the information base (Fig. 5). The list of data accessed by the system is set in the program settings.

Rice. 5. Registration of access to personal data in “1C: Accounting 8” edition 3.0.

In addition, in accordance with the requirements of Federal Law No. 152-FZ, the program generates a document “Consent to the processing of personal data”, and the text of the document is available for editing in the program itself (Fig. 6).

Rice. 6. Creation and editing of the document “Consent to the processing of personal data”

in "1C: Accounting 8" edition 3.0.

9) Edition 3.0 provides function view-only database access, without the ability to edit it. To do this, a new user is created in configurator mode, to whom the database is provided in read-only mode. This function will be useful during audits. As a result, the auditor can independently view all the accounting information he needs without distracting the accountant from his work, and the accountant will be calm about the safety of the data.

10) Long operations (closing the month, generating some reports) can now be performed in the background. This is certainly important from a time-saving point of view.

11) Finally, the MOST IMPORTANT difference between edition 3.0 and edition 2.0 is possibility of working via the Internet according to the modelSaaS(Software -as -a -Service). The work does not require installation of the platform and information databases on the user's computer. The program is launched via a web browser from the website of the company providing such a service.

Thus, you can work in the program from anywhere in the world where there is Internet access. It is convenient, profitable, safe and corresponds to the latest trends in the development of the information technology services market.

The functionality of "1C: Accounting 8" edition 3.0 takes into account all the latest changes in legislation relating to accounting and tax accounting.

Features of the transition to edition 3.0

According to the information letter of the 1C company No. 16076 dated December 29, 2012, the basic version of Enterprise Accounting, edition 3.0, is provided FREE OF CHARGE for registered users of software products:

- “1C: Accounting 8. Basic version”,

- “1C: Accounting 8 OEM”,

- “1C: Accounting 8.0. Basic version",

- “1C: Accounting 8.0 OEM”,

- “1C:Entrepreneur 8”,

- “1C: Simplified 8”.

The transition to the new edition is carried out as an update to edition 2.0 in configurator mode. The 1C company recommends using the 1C:Enterprise 8 platform version 8.2.16 and higher for this.