{"id":17758,"date":"2026-01-29T11:53:39","date_gmt":"2026-01-29T11:53:39","guid":{"rendered":"https:\/\/tenthplanet.in\/idempiere\/?p=17758"},"modified":"2026-01-29T11:53:41","modified_gmt":"2026-01-29T11:53:41","slug":"how-do-document-action-and-document-status-access-work-in-idempiere","status":"publish","type":"post","link":"https:\/\/tenthplanet.in\/idempiere\/how-do-document-action-and-document-status-access-work-in-idempiere\/","title":{"rendered":"How do Document Action and Document Status Access work in iDempiere"},"content":{"rendered":"\n

iDempiere controls document processing not only by window access, but also by what a user is allowed to do to a document and which document statuses they are allowed to see or interact with<\/strong>.
Document Action Access and Document Status Access together form the fine-grained security layer<\/strong> for document lifecycle control.<\/p>\n\n\n\n

Document Action Access controlling what actions a role can perform<\/strong><\/h2>\n\n\n\n

Document Action Access defines which document actions a role is allowed to execute<\/strong> for a specific document type.
Document actions are system-level operations such as Complete, Prepare, Void, Close, Reverse, Reactivate,<\/em> and Post<\/em>.<\/p>\n\n\n\n

When a user clicks the Document Action<\/strong> dropdown on a document, iDempiere checks the role\u2019s Document Action Access before allowing the action.<\/p>\n\n\n\n

For each Role and Document Type combination<\/h3>\n\n\n\n
    \n
  • iDempiere checks the allowed Reference List value<\/strong> (action)<\/li>\n\n\n\n
  • If the action is enabled and active, the user can perform it<\/li>\n\n\n\n
  • If not, the action is hidden or blocked<\/li>\n<\/ul>\n\n\n\n
    \"\"<\/figure>\n\n\n\n


    Document Status Access controlling which document statuses are visible or usable<\/strong><\/h2>\n\n\n\n

    Document Status Access defines which document statuses a role is allowed to access or interact with<\/strong>.
    Document statuses represent the current lifecycle stage<\/strong> of a document, such as Drafted, In Progress, Completed, Closed, Voided,<\/em> or Reversed<\/em>.<\/p>\n\n\n\n

    This access works at a visibility and usability level<\/strong>, not action execution.<\/p>\n\n\n\n

    For each Role<\/h3>\n\n\n\n
      \n
    • iDempiere checks which Document Status values<\/strong> are assigned<\/li>\n\n\n\n
    • Only documents in those statuses are visible or selectable<\/li>\n\n\n\n
    • Status-restricted documents may appear as read-only or hidden<\/li>\n<\/ul>\n\n\n\n
      \"\"<\/figure>\n\n\n\n

      How Document Action and Document Status Access work together<\/strong><\/h2>\n\n\n\n

      These two access controls are complementary<\/p>\n\n\n\n

        \n
      • Document Status Access<\/strong> decides which documents<\/em> a user can see or work with<\/li>\n\n\n\n
      • Document Action Access<\/strong> decides what the user can do<\/em> with those documents<\/li>\n<\/ul>\n\n\n\n

        A user must satisfy both<\/strong> rules to perform an action.<\/p>\n\n\n\n

        Document Action Access controls what actions a role can perform<\/strong> on a document, while Document Status Access controls which document lifecycle states a role can access or view<\/strong>. Together, they provide fine-grained control over document processing in iDempiere, ensuring that every document moves through its lifecycle securely, consistently, and according to organizational rules.<\/p>\n","protected":false},"excerpt":{"rendered":"

        iDempiere controls document processing not only by window access, but also by what a user is allowed to do to […]<\/p>\n","protected":false},"author":19,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[38],"tags":[],"class_list":["post-17758","post","type-post","status-publish","format-standard","hentry","category-master"],"acf":[],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/17758","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=17758"}],"version-history":[{"count":0,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/17758\/revisions"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=17758"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=17758"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=17758"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}