Creating Departments and Employee Types to Organize Users 22 How Hierarchy Filtering Affects Users Department Visibility When hierarchy filtering is enabled, the following department-related limitations are placed on each user: Users can only view and edit their department and their department's sub-departments. Users can only add departments as sub-departments to their department. When adding or editing a user, only the user's department and its sub-departments can be assigned to the new user. Project Visibility When hierarchy filtering is enabled in the Project & Billing Edition, the following project-related limitations are placed on each user: Users can only view, add, and edit projects in their department and their department's sub-depart- ments. When adding or editing a project, the project canonly be made visible to the user's department and its sub-departments. Only users within the visible departments can be assigned to the project team or to tasks in the project. User Visibility When hierarchy filtering is enabled, the following limitations related to other users are placed on each user: Users can only view, add, and edit users in their department and in their department's sub-depart- ments. When adding or editing a user, only users in the department or sub-departments of the user doing the adding or editing (the currently logged in user) can be selected as their supervisor. Users can only view historical data for the users in their department and its sub-departments. For information on how reports are affected by hierarchy filtering, see the online help. Visibility and Multiple Department Assignments A user can have more than one department assigned to them, thus expanding their visibility within the sys- tem. When more than one department is assigned to a user, the above limitations apply to each department. For example, if a user is assigned Department A and Department B, they will be able to view and edit users in Department A and its sub-departments and will also be able to view and edit users in Department B and its sub-departments. This occurs regardless of whether Department A and Department B are in the same branch of the hierarchy. Hierarchy Filtering and Permissions Permissions control what features a user has access to and what actions they can take, while hierarchy fil- tering controls what data a user has access to. The two can be used in conjunction to increase security within your Web TimeSheet implementation. For example, a user's permissions control whether theycan edit projects, but the user's place in the depart- ment hierarchy controls which projects are visible to the user. With the combination of permissions and hi- erarchy filtering, the user can edit projects, but only those projects visible to them. If hierarchy filtering is not enabled, the user has access to edit any project defined in the system. Conversely, if the user's permissions Users can only complete the actions mentioned below if they are assigned a permission that allows for it. For information on permissions, see Chapter 11, Controlling what Users can Access on page 55.