Header Menu Access and Configuration in NetSuite

The My Account application in NetSuite provides a dynamic header menu that links to various features based on user permissions. This menu appears in both the application sidebar and header, ensuring that only relevant options are visible according to the user's roles and permissions.

How Is the Header Menu Generated?

The Header module displays the application header using the header_menu_myaccount.tpl template. It determines which menu items a user can see through the data-permissions attribute in the HTML. If a user lacks the permissions specified in this attribute, the corresponding menu items will not be displayed.

Example of Header Menu Item

Below is a code snippet that demonstrates how a menu item for returns is defined in the menu template:

<a class="header-menu-myaccount-anchor-level3" href="#" data-touchpoint="customercenter" data-hashtag="#returns" data-permissions="transactions.tranFind.1,transactions.tranRtnAuth.1" name="returns">
   {{translate 'Returns'}}
</a>

Understanding the Account Overview Menu

The Account Overview menu is automatically generated when the My Account application loads. Each feature defined in the application modules is encapsulated within a MenuItems object, which specifies the characteristics of each menu item, including permissions required to access it.

Example of a Menu Item Definition

The following JavaScript snippet shows how a quote item is defined in the Quote.js entry point module:

1MenuItems: {
2         parent: 'orders',
3         id: 'quotes',
4         name: _('Quotes').translate(),
5         url: 'quotes',
6         index: 5,
7         permission: 'transactions.tranFind.1,transactions.tranEstimate.1'
8}

In this example, the permission field specifies the access required for the quotes menu item.

Handling Forbidden Access

Even with a restricted menu, users may attempt to access features they do not have permission for. The ErrorManagement module provides a standardized response for denied access, customizing the message as needed:

Sorry! You have no permission to view this page. Please contact the website administrator, click here to continue.

This message can be tailored to fit the web store’s tone and branding.

Related Topics

• Customer Center Custom Permissions
• Website Restriction
• Website System Notes

Ensuring that the My Account application menu is configured correctly is crucial for maintaining a secure and user-friendly experience for NetSuite users. Proper configuration of roles and permissions means users can only access what they are authorized to view, streamlining their experience within the application.