Individual invisibility of menu items for a subset of based-on users

[oleh-maikovych]

Description

In TG-based applications base users (aka profile users) determine what module menu items are visible to their based-on user. All module menu items are visible by default and base users need to explicitly uncheck menu items for them to become invisible -- invisible for all of their based-on users.

There are situation where a more find grained control is required, where it is necessary to "hide" some menu items for a subset of based-on users that are based on the same base user. This can be achieved by enhancing the current mechanism to introducing "exclusions" to the rule of "all based-on users see everything that their base users did not mark a invisible". Effectively, it should be possible for a base user to specify who of their based-on users should be excluded from the "visibility" of a menu item (i.e., no simply "all").

From the UI interaction point of view, there should be an action on the righthand side of the visibility checkbox, available for each module menu item and visible only to base users. This action should open a master with a collectional property editor, listing all users based on the current base user. The base user can use this master to specify users who should not see a menu item by unselecting them from the list.

The algorithm for determining what menu items are visible for a based-on user should be enhanced to take into account the menu invisibility information for both the base user (as presently) and the individual based-on user.

If a based-on user is rebased to a different base user, they should inherit the menu visibility from that user, and all their existing individual exclusions should be removed.

Expected outcome

Flexible mechanism for configuring visibility of menu items for individual based-on users by extending the current approach with based-on users.