Forum Discussion

mvalerio24's avatar
mvalerio24
Contributor
2 years ago
Solved

Application Security Role update with Business Rules

Is it possible to update the Application Security roles with in an extender Business rule? I want to be able to update the Modifydata role with the push of a button.
dashboards
Extenders
  • photon's avatar
    photon
    2 years ago

    I've been able to update security groups without an IIS reset using a BR, here are the relevant pieces:

    Dim objMember As WritableMember = BRApi.Finance.Members.ReadWritableMemberNoCache(si, DimType.Entity.Id, memberName)

objMember.ReadDataGroupUniqueID = BRApi.Security.Admin.GetGroup(si,groupName).Group.UniqueID

BRApi.Finance.MemberAdmin.SaveMemberInfo(si, True, objMember, False, properties, False , descriptions, TriStateBool.FalseValue)

     We've had this running on a nightly schedule to keep our descriptions up to date with MDM but it could be hooked to a button press just the same. I don't know how it compares to Jack's method and his certainly looks simpler but maybe it will be of some use.

JackLacava's avatar
JackLacava
Icon for OneStream Employee rankOneStream Employee
2 years ago

It's OneStream, of course it's possible šŸ˜Ž

Check out BRApi.Security.Admin.GetRole and .SaveRole.

  • RobbSalzmann's avatar
    RobbSalzmann
    Valued Contributor II
    2 years ago

    Thanks JackLacava .  To put a little more structure around this, the requirement is to lock a scenario (using a button) for a period of time, then set it back to its original access with another button.

    Use Case:
    An all day meeting with the CFO commences to discuss and refine a forecast.  During this meeting the scenario needs to be locked down to prevent a potential moving target, changing values.  When the meeting is over the scenario is opened back up and FAs are given tasks to update the forecast.
    The admin wants a simple set of on/off buttons to accomplish the locking/unlocking of the scenario.

    • cjohnson's avatar
      cjohnson
      New Contributor III
      2 years ago

      Would locking/unlocking the workflow not be a valid approach for this?

      • mvalerio24's avatar
        mvalerio24
        Contributor
        2 years ago

        I dont think so, we aren't trying to lock a scenario down. We are basically trying to change the write group on a scenario so certain users can't make any changes for a certain amount of time and then change it back after. I've tried using code to update the read and write group but id doesn't seem to update in OS, only on the backend.