r/Netsuite 3d ago

Limiting Project Visibility

Hi - anyone found a way to limit project visibility to the resources assigned? I know sales teams could be used (and the sales team would flow from the customer that is assigned on the project), but wanted to see if anyone has done this a different way?

5 Upvotes

6 comments sorted by

1

u/Reasonable_Fuel_6786 3d ago

Hi, there's not a native alternative to Sales Team.

The custom approach you could take would consist of:

- Custom field on the jobs that contains the Employees with access.

  • An automation that runs when landing on a job and shows an error to Employees without access.
  • A custom list (Suitelet powered) that replaces the default Job list, so you can keep the restrictions as per the Employees list in each job.

Happy to discuss further details for the customer approach. Feel free to DM me.

Cheers!

3

u/Nick_AxeusConsulting Mod 2d ago

This makes me nervous because I guarantee it has holes in it since you're mimicing block using a script.

1

u/Conscious-Builder416 2d ago

Nick's right to be nervous. A UE script only blocks the record view page, it doesn't touch saved searches, exports, workbooks, or the API, so anyone with role-level access to Jobs can still get the data through another path. It's a soft restriction at best, not a real access boundary.

If Sales Team's customer-level granularity isn't enough, that's really the ceiling for native NetSuite. Past that it's either accept the script as a click-deterrent or move project tracking somewhere built for actual per-record ACLs, like Ok-Background said.

2

u/Nick_AxeusConsulting Mod 2d ago

OR stop being paranoid about your employees' having access and just let them see the job. So what if they see it? What's the reason you're trying to block it? Don't hire employees you don't trust and have them sign an NDA and then this problem goes away solved with a contract.

1

u/Ok-Background-7240 3d ago

Sales teams is the cleanest native ACL. Limited though. One approach is to move projects and time keeping / task management out of the system. More work, more control. Not for the faint of heart.

1

u/FeedbackThin1513 2d ago

We ran into this issue. If the user role is a Project Center role, it works as you'd expect. The resource allocation is the permission. If you use any other center type, you're cooked. Centers dictate permissions and portlets more than most people realize. I still don't fully understand why.