Forum Discussion

mvalerio24's avatar
mvalerio24
New Contributor III
2 years ago

Application Security Role update with Business Rules

Is it possible to update the Application Security roles with in an extender Business rule? I want to be able to update the Modifydata role with the push of a button.
Dashboards
Extenders
  • photon's avatar
    photon
    2 years ago

    I've been able to update security groups without an IIS reset using a BR, here are the relevant pieces:

    Dim objMember As WritableMember = BRApi.Finance.Members.ReadWritableMemberNoCache(si, DimType.Entity.Id, memberName)

objMember.ReadDataGroupUniqueID = BRApi.Security.Admin.GetGroup(si,groupName).Group.UniqueID

BRApi.Finance.MemberAdmin.SaveMemberInfo(si, True, objMember, False, properties, False , descriptions, TriStateBool.FalseValue)

     We've had this running on a nightly schedule to keep our descriptions up to date with MDM but it could be hooked to a button press just the same. I don't know how it compares to Jack's method and his certainly looks simpler but maybe it will be of some use.

RobbSalzmann's avatar
RobbSalzmann
Valued Contributor II

Thanks CJ  We did try several different approaches with changing things in the database. 
Here's the rub:  Those changes don't become effective until the application server on which all applications are running is restarted.  wut?

Our mystery here is locking and unlocking a scenario for a planning or strategic plan application should be a fairly ordinary task programmatically.   We're unable to find this magic. 

I'm assuming the difficulty in programmatically altering access to an application's elements via a BR is made difficult on purpose.  However, I think simply locking and unlocking a scenario should be procedural.

cjohnson's avatar
cjohnson
New Contributor III
2 years ago

I get you, I was hoping because exclusion groups are on the System side and not inside the Application it wouldn't require the restart.

If your admin is comfortable/able to access security groups rather than doing it through a dashboard button, exclusion groups could be the simplest solution. I know they are underutilized in OS so I set up a sample one below. In this example your admin would be toggling the Base_User's Allow/Deny Access dropdown.

 

  • mvalerio24's avatar
    mvalerio24
    New Contributor III
    2 years ago

    Interesting, do you know if its possible to update the deny/allow access in a BR? So instead of updating the security group on the scenario, use this exclusion group but have them both set to allow access. Then when the meeting starts, hit a button and it updates one group to deny access and then change it back after meeting is over.

  • cjohnson's avatar
    cjohnson
    New Contributor III
    2 years ago

    That's not something I have done, but it doesn't feel too farfetched. The SecExclGroupChild database table has a flag for Allow Access. So maybe there is a way to modify that value without having to restart everything.