|
To read a users name (User.getName()) whitin a script element, I assigned the corresponding permission "UserReadAll" to the role the calling user owned. Nevertheless, ivy reports the Error "The session does not fulfill the permission rule SESSION (MATCHES THIS AND OWNS UserReadOwnName PERMISSION) OR OWNS UserReadName PERMISSION OR OWNS UserReadName@SYSTEM PERMISSION" After that, I added also the permission "UserReadName/UserReadFullName" and then it worked. What's the difference between "UserReadAll" and "UserReadName"? In my opinion, the "UserReadAll" permission should cover and allow all "Read" operations on a user object. Is there any documentation which explains the permission concept of ivy? I couldn't find any detailed information about in the documentation section available on the xpert.ivy download area. Thanks and regards, Stefan |
|
The permission UserReadAll is necessary to call methods like ISecurityContext#getUsers() or ISecurityContext#findUser(...). So it gives you the right to access all user objects. The permission UserReadName gives you the right to call the method IUser#getName() on any user object. The permission UserReadOwnName gives you the right to call method IUser#getName() on the user object that represents yourself. E.g. the user object that is associated with the current session. Thanks, Reto. Is there any detailed documentation available? Hi Stephan See question http://answers.axonivy.com/questions/1014 to find out where the permissions needed to call a method is documented |
Once you sign in you will be able to subscribe for any updates here
By RSS:Markdown Basics
Tags:
Asked: 20.10.2014 at 10:35
Seen: 2,274 times
Last updated: 21.10.2014 at 10:03
