Forum Discussion

mvalerio24's avatar
mvalerio24
New Contributor III
2 years ago

Application Security Role update with Business Rules

Is it possible to update the Application Security roles with in an extender Business rule? I want to be able to update the Modifydata role with the push of a button.
Dashboards
Extenders
  • photon's avatar
    photon
    2 years ago

    I've been able to update security groups without an IIS reset using a BR, here are the relevant pieces:

    Dim objMember As WritableMember = BRApi.Finance.Members.ReadWritableMemberNoCache(si, DimType.Entity.Id, memberName)

objMember.ReadDataGroupUniqueID = BRApi.Security.Admin.GetGroup(si,groupName).Group.UniqueID

BRApi.Finance.MemberAdmin.SaveMemberInfo(si, True, objMember, False, properties, False , descriptions, TriStateBool.FalseValue)

     We've had this running on a nightly schedule to keep our descriptions up to date with MDM but it could be hooked to a button press just the same. I don't know how it compares to Jack's method and his certainly looks simpler but maybe it will be of some use.

RobbSalzmann's avatar
RobbSalzmann
Valued Contributor II

Thanks JackLacava .  To put a little more structure around this, the requirement is to lock a scenario (using a button) for a period of time, then set it back to its original access with another button.

Use Case:
An all day meeting with the CFO commences to discuss and refine a forecast.  During this meeting the scenario needs to be locked down to prevent a potential moving target, changing values.  When the meeting is over the scenario is opened back up and FAs are given tasks to update the forecast.
The admin wants a simple set of on/off buttons to accomplish the locking/unlocking of the scenario.

cjohnson's avatar
cjohnson
New Contributor III
2 years ago

Would locking/unlocking the workflow not be a valid approach for this?

  • mvalerio24's avatar
    mvalerio24
    New Contributor III
    2 years ago

    I dont think so, we aren't trying to lock a scenario down. We are basically trying to change the write group on a scenario so certain users can't make any changes for a certain amount of time and then change it back after. I've tried using code to update the read and write group but id doesn't seem to update in OS, only on the backend.

    • JackLacava's avatar
      JackLacava
      Honored Contributor
      2 years ago

      Security changes will typically need a refresh of some sort - app refresh, page refresh, logout/login,  etc - before they are reflected consistently in every corner of the UI. Beyond that, it should all work; if there is some other problem with the API mentioned, maybe it should be reported to Support.

      • mvalerio24's avatar
        mvalerio24
        New Contributor III
        2 years ago

        Only seems to update on backend and would need an IIS reset for it to be changed in OS which isn't ideal