RxWorks

Setting User Security

The Options and Setup > User > Security Tab allows you to set access levels for each user (within various areas) of RxWorks.

Security Pointers

• Only give each user access to areas with which they need access to do their job.

• Do not extend access to a person simply because they have gained extra trust, or because they have been around for longer.

• Do NOT give staff access to the System Controller account. We recommend that even the practice manager maintains a personal account with limited access so that no one is using the System Controller account for day to day tasks.
  

• Consider setting up user profiles based on your staff “roles”.  For example, you might choose to give no one (including the practice owner) access to any high-level reports from their own log in.  You could create a special user profile to access high level reports using a special password. By doing this, you keep complete control over who is dealing with those reports, but can still delegate responsibility without the worry of someone else making use of the SUP account.

The Security Access Levels Explained

None

Set a field to “None” to block the user from this part of the program. If the user is set to “None” on the Patient page, then this page will not be displayed amongst the Client/Patient information



View

Setting a field to “View” limits the user to viewing the information displayed on a page only. A user with “View” access cannot edit or change the information.

If any attempt is made a warning will be generated that indicates the user’s security is not high enough.

Modify-2 (Relates to Fees)

Setting a field to “Modify-2” allows the user to change the printed name, deactivated date, defaults and set the item to charge default.  In attachments, the user can only work on labels and handout details.  In the stock control tab, the user can set things like critical level, ideal level, lasts from and lasts until.

 

Modify-3 (Relates to Fees)

Gives the user the same the rights from “Modify-2”, but also allows then to alter the price details on the product or service.

Modify

Allows the user to edit all aspects of the page they are using.  When looking at fees, the user is able to add/ edit/ clear fields and then save. It is important to note that while a record cannot be deleted, the information contained in that record may in fact be removed.

 

Delete

Giving a user permission to delete allows them to delete any record they are viewing.

However, if a user tries to delete a record, they will be prompted to confirm if they REALLY want to proceed.

The user must physically type “YES” in order for the delete to proceed.

Reserve this level of permission for the System Controller only.  Access to delete records is dangerous and can be costly.

Do NOT give staff access to the System Controller account. We recommend that even the practice manager maintains a personal account with limited access so that no one is using the System Controller account for day to day tasks.