This is related to a previous topic of mine,
however I thought it would be prudent to start a new topic as it’s not entirely a continuation of that topic.
In Admin, I have a manager as a member of DepartmentManager and many clerks as members of DepartmentClerk. I’m trying to figure out which authorizations are required to allow the manager to re-assign a task to a specific clerk. As far as I could uncover, the DepartmentManager needs a User authorization of READ permissions on the clerks. So I’m left with two options :
a single READ * This has the downside of the manager having full view of all the users in the entire database, not only the department. As per the above response from @martin.stamm it’s not possible to grant a department manager view of only those users in her/his department.
multiple READ clerkID This is precisely what I want, however it’s an administrative nightmare, especially in view of my previous topic.
I even looked at making the manager a superfluous member of DepartmentClerk, but this did not alleviate the problem. Surely this use-case must’ve been encountered before? How did you solve it?
Any thoughts on approaching it from a different angle would be much appreciated.