Link Website Customizations to User Roles

Administrators and users with privileges to use SuiteScript can set permissions on .ssp and .ss file records associated with an SSP application. With enhanced permissions enabled, a script can be triggered by an action performed by the users you specify. This enhanced permission capability is useful for creating website customizations. For example, you can create a personalized user interface for customers on your e-commerce website. A script can be triggered when a customer navigates to the script page on your shopping domain.

Note

Permissions can be applied only to SuiteScript files and SSP files within an SSP application folder.


To set permissions on an .ssp or .ss file:

  1. Go to a folder in an SSP application. For example, Web Site Hosting Files > Live Hosting Files > SSP Applications > My SSP Application > My Script Files.

  2. Click Edit next to the .ssp or .ss file you want to modify.

  3. Click the Permissions subtab.

  4. Check the Enable box.

  5. In the Execute as Role list, select the role with which the script should be executed. When the script is executed, the outcome is only limited by the permissions associated with the role you select here. The script has access to the same permissions as the role you select.

    Note

    The Administrator role cannot be used.


  6. Select individuals who can trigger the script to run:

    1. (Optional) To allow all visitors to the web store to execute the SS or SSP script, check the Run Script Without Login box, or the Roles Select All box. If you want to select specific roles or other criteria, then clear these boxes.

    2. (Optional) To give a specific audience permissions to execute the script, select who can execute the script from the following multi-select boxes:

      • Roles

      • Departments

      • Subsidiaries

      • Groups

      • Employees

      • Partners

  7. Click Save.

When you configure permissions for an SSP or SS file, consider creating a custom role to use in the Execute As Role list. The custom role that you create should have exactly the privileges needed for your script to do what is intended, and nothing more. Typically, this script file permission capability is used for website customization.