How do Window, Process, and Form Access work in iDempiere

It provides fine-grained control over which screens, actions, and inquiry tools a role can access. In iDempiere, access to application functionality is not assumed every window, process, form, and information view must be explicitly allowed through a role. This ensures that users can perform only the functions relevant to their responsibilities in iDempiere.

Window access controlling operational screens

Window Access determines which transactional and master-data screens a role can open. If a window is not granted to the role, it does not appear in the menu at all.

This is the primary mechanism used to restrict access to sensitive windows such as accounting setup, asset configuration, or system administration screens. Users can only view and work with the windows explicitly allowed for their role.

Process access controlling system actions and executions

Process Access governs which background or on-demand actions a role can execute. These include document completion, posting, batch processing, imports, and administrative utilities.

Restricting process access is critical because many system processes can change data or affect accounting. Even if a user can open a window, they cannot execute its associated process unless the role allows it.

Form access controlling form screens

Form Access manages access to special-purpose forms that are not standard data entry windows. These are typically used for operational workflows such as material movements, allocation, or reconciliation.

By granting form access selectively, administrators ensure that only trained users can perform sensitive operational tasks.

Info access controlling inquiry and lookup screens

Info Access controls which inquiry and information windows a role can use. These screens are primarily for viewing data and searching rather than transactions.

Even though Info windows are read-only, they can expose sensitive data. Restricting info access ensures that users see only the inquiries relevant to their role.