1. Identification
| Parameter | Value |
|---|---|
| Object type | Catalog |
| Name | ВнешниеПользователи |
| Full name | Справочник.ВнешниеПользователи / Catalogs.ВнешниеПользователи |
| Synonym | "External Users" |
| Configuration | Trade Management for Kazakhstan, ed. 3.4.5.21 |
| Subsystem | "Users" of the Standard Subsystems Library (SSL) |
| Where to find in 1C | "Master Data and Administration" section → "External Users" |
| Navigation link | e1cib/list/Справочник.ВнешниеПользователи |
Purpose. The catalog stores the list of external users of the information base — participants who work in the system but are not employees of the organization: counterparties, partners, clients, supplier representatives, web portal users, etc. Each catalog item is linked to one rights-owner object (typically an item of the Partners, Counterparties, or Individuals catalog) and mapped to an information base user (the "IB User" metadata object with the "External" flag).
The key difference from the Users catalog: external users receive access under a separate authorization model, cannot be assigned "internal" roles, and login for them is only allowed after the "use external users" setting (the ИспользоватьВнешнихПользователей constant) is enabled in the database.
The catalog is a standard SSL mechanism and is used in Trade Management for Kazakhstan without national customization: it does not participate in tax or accounting records, so VAT rates (16%), MCI/MMW values, IIT/MPC contributions, and Kazakhstan accounts do not apply to this object — they relate to accounting documents, not the access subsystem.
2. Header Attributes and Tabular Sections
Attributes (header)
| Attribute | Type | Purpose |
|---|---|---|
Наименование (Description) |
String | Representation of the external user in lists. Usually generated automatically from the owner object. |
Владелец (authorization parent) |
CatalogRef (composite: Partners, Counterparties, Individuals, etc.) | The object on whose behalf the external user acts; defines the data access context. |
Недействителен (Invalid) |
Boolean | Blocking flag. A blocked external user is hidden from active lists and cannot log into the system. |
Комментарий (Comment) |
String | Free-form text note. |
ИдентификаторПользователяИБ (IB User ID) |
UUID | Internal link between the catalog item and the "IB User" account (external). Not edited manually. |
Подготовлен (Prepared) / SSL internal attributes |
Boolean / other | Technical flags for login setup state (password presence, OS/OpenID authentication, etc.). |
The composition of "fine-grained" internal attributes (e.g., authentication method flags) is version-dependent — to be verified against the metadata composition of the specific SSL release in 3.4.5.21. (Requires verification.)
Tabular Sections
| Tabular section | Purpose |
|---|---|
Контакты (Contacts) (if present) |
Contact information of the external user. |
| Additional attributes/information | Implemented via the SSL "Properties" mechanism, stored in external information registers rather than in the catalog table itself. |
Authentication data (login, password, OpenID/OS login flags) is not stored in the catalog — it belongs to the "IB User" object and is recorded using platform tools (ЗаписатьПользователяИБ).
3. Forms
| Form | Purpose |
|---|---|
ФормаЭлемента (Item Form) |
Main external user card: description, owner object, "Invalid" flag, login setup tab (login, authentication method, password), rights/access groups. |
ФормаСписка (List Form) |
List of external users with filtering by access groups and validity flag. |
ФормаВыбора (Selection Form) |
Selecting an external user in other objects (e.g., when configuring access rights). |
ФормаГруппы (Group Form) |
External user group card (the catalog is hierarchical with groups). |
| Login setup form (internal, from SSL) | Managing the "IB User" account: login name, 1C:Enterprise/OS/OpenID authentication, password change requirement. |
4. Key Module Procedures
No dedicated application BSL evidence was provided for this object, so below are the standard handlers of the SSL external users catalog (implemented in the object module, form modules, and the common module ПользователиСлужебный/ВнешниеПользователи).
Object module:
ПередЗаписью(Отказ)(BeforeWrite(Cancel)) — checks rights to modify external users, validates the link to the owner object, synchronizes the "Invalid" flag with blocking the IB account login.ПриЗаписи(Отказ)(OnWrite(Cancel)) — updates theИдентификаторПользователяИБlink, refreshes the rights cache, registers changes for data exchange.ПередУдалением(Отказ)(BeforeDelete(Cancel)) — deletes/unlinks the associated "IB User" account.ОбработкаЗаполнения(ДанныеЗаполнения)(FillCheckProcessing(FillingData)) — fills in the description and owner object when created based on another object.
Item form module:
ПриСозданииНаСервере(OnCreateAtServer) — prepares the login page, reads IB account parameters, restricts field visibility based on the current user's rights.ПослеЗаписиНаСервере(AfterWriteAtServer) / "Set password" button handlers — callsЗаписатьПользователяИБ, manages authentication methods.
Common module (ВнешниеПользователи):
ТекущийВнешнийПользователь()(CurrentExternalUser()) — returns a reference to the external user of the current session; widely used in RLS access restriction templates.ИспользоватьВнешнихПользователей()(UseExternalUsers()) — flag indicating whether working with external users is enabled in the database.АвторизоватьВнешнегоПользователя(...)(AuthorizeExternalUser(...)) — internal logic for matching the IB account and the catalog item during login.
5. Posting and Movements
The catalog is not posted and generates no movements in accumulation registers, accounting registers, or information registers of the accounting circuit. This is an access subsystem object, not a document.
Only the following SSL internal information registers are indirectly linked to the catalog item and updated on write:
ГруппыДоступаПользователей/ПользователиГруппДоступа(User Access Groups / Access Group Users) — the external user's membership in access groups (used for RLS);- registers storing additional information and contact information;
- the change registration mechanism for exchange plans (distributed infobase/synchronization).
Postings under the standard Kazakhstan chart of accounts (1210, 1030, 1330, 3310, 3130, 6010, 7010) and tax movements (VAT 16%, IIT, MPC 10%, MPC (employer) 3.5%, CSHI 2%, SHI 3%, SC 5%, social tax 6%), as well as e-invoices/consignment notes, are not generated by this object — they arise in accounting documents (sales, receipts, etc.), with which the external user can only interact through a web portal.
6. Related Objects and Creation Based On
Owner objects (authorization):
Справочник.Партнёры(Partners),Справочник.Контрагенты(Counterparties) — standard sources of external users in Trade Management (clients/suppliers working through a personal portal);Справочник.ФизическиеЛица(Individuals) — counterparty representatives.
Related metadata objects:
- "IB User" (external) — login account, linked via
ИдентификаторПользователяИБ; Справочник.ГруппыДоступа(Access Groups),Справочник.ПрофилиГруппДоступа(Access Group Profiles) — rights assignment;- SSL registers for access groups, additional information, and contact information.
Creation based on. The standard scenario is creating an external user based on a Partners/Counterparties/Individuals item: the ОбработкаЗаполнения (FillCheckProcessing) handler populates the owner object and description. The reverse — creating documents from the external user card — is not supported.
7. Extension Points
- Configuration extension: adding attributes/forms via the extension mechanism without removing support status; overridable SSL modules
ПользователиПереопределяемый,УправлениеДоступомПереопределяемый. - Additional attributes and information ("Properties" subsystem) — the preferred way to store application-specific attributes of the external user without modifying metadata.
- RLS / access restriction: templates using
ВнешниеПользователи.ТекущийВнешнийПользователь()to segregate data by owner object. - Event subscriptions to the catalog's
ПередЗаписью/ПриЗаписиfor integration with external authorization services (SSO, OpenID). - Web/HTTP services and personal portal — programmatic creation and matching of external users during online client registration.
The specific composition of overridable procedures and internal attributes is tied to the SSL version in release 3.4.5.21 and requires verification against the metadata composition of that specific build.