Patent claim: A method for restricting specific user roles from accessing predetermined portions of MES screens SC depending on the state of the MES screen page in a manufacturing execution system hereinafter referred to as MES comprising the steps of a at engineering phase a1 defining a number of logical entities LE such as a production order a machine a production line personnel materials by an attribute AT present within a production plant controlled and monitored by the MES a2 associating with each logical entity LE a number of actions AC being executable on andor with respect to the respective logical entity LE a3 associating to an action AC a restriction rule RR that defines a number of rules for restricting the action AC relative the values of one or more attributes AT a4 associating the actions AC and the respective restriction rules RR to a number of roles RO in terms of role specific access rights AR thereby establishing a data segregation service DS a5 writing the role specific access rights AR into a MES screen configuration file CF stored at a MES database DB a6 defining a panel P in the MES screen SC that comprises data that is subject to role specific access rights AR b at a runtime phase b1 when the MES screen SC is requested for the first time or when a specific user US interacts with the MES screen SC reading by the panel P from the configuration file CF the logical entity LE and the action AC related to the request of the specific user US b2 retrieving the information on the state of the MES screen page from a contextualization service CS that comprises thecurrent values for the attribute AT of the respective logical entity LE wherein the current value of the attribute AT of the logical entity LE is written on the contextualization service CS by a logic programmed on the MES screen SC b3 invoking by the panel P the data segregation service DS asking the right to load the content of the panel P to the MES screen SC b4 checking by the data segregation service DS the information supplied by the panel P such as the specific user US the logical entity LE the action AC and the current value of the attribute AT against the roles RO and the role specific access rights AR stored to the MES database DB at the engineering phase and only if the specific user US is assigned a role RO that is allowed to perform the action AC responding to the panel P that the permission is granted and showing the content of the panel P.

Related passage: More specifically the navigation area 111 may include a Work Inbox field 102 and a field 103 identifying a rolebased set of activities.The rolebased set of activities 103 may be tailored to a particular organizational role or even a particular individual.In this example the activities include Billing Contacts Invoices Opportunities Quotes and Sales Orders.These categories are arbitrary and others are possible.The activities may include performing transactions some of which may involve generating reports.Work Inbox 102 may correspond to an aggregated task window 104 comprising a general aggregated list of selectable tasks which may be of any type though they belong to a particular role or individual.The session area 110 may include a Home icon 105 for displaying the navigation area if nondisplayed and navigating from a different display to the Work Inbox as described in more detail further on.