https://answers.axonivy.com/questions/1703/assign-and-revoke-role-to-session-user-dynamically<p>Hello,</p> <p>I need to assign and revoke Ivy Role dynamically on the session user. If I understand the API documentation well, the following method assigns the given role to the session, the role should be automatically unassigned after logout: Ivy.session().assignRole(role);</p> <p>Here the API documentation:</p> <p><em>@PublicAPI(value=EXPERT) Assigns a role to the session. Parameters:role The role to assign</em></p> <p>The problem is that I need also to revoke an Ivy Role dynamically, I could not find a method like Ivy.session().revokeRole(IRole role) or Ivy.session().unassignRole(Irole role). Is there a possibility to do that?</p> <p>Thanks a lot in advance.</p> <p>Emmanuel</p>enFri, 01 Apr 2016 13:44:42 -0400https://answers.axonivy.com/questions/1703/assign-and-revoke-role-to-session-user-dynamically/1711<p>You can set the assigned role back to it's default value (and behaviour) by assigning the top level role called "everybody". </p> <pre><code>IRole everybody = Ivy.wf().getSecurityContext().getTopLevelRole(); theSession.assignRole(everybody); </code></pre> <p>Alternatively you can manage the roles on the session user as roland described: </p> <pre><code>IUser theUser = Ivy.wf().getSecurityContext().getCurrentSession().getSessionUser(); theUser.addRole(myRole); theUser.removeRole(myRole); </code></pre>Reguel WermelingerFri, 01 Apr 2016 13:44:42 -0400https://answers.axonivy.com/questions/1703/assign-and-revoke-role-to-session-user-dynamically/1711https://answers.axonivy.com/questions/1703/assign-and-revoke-role-to-session-user-dynamically/1704<p>Hello Emmanuel,</p> <p>you could try ivy.session.getSessionUser().removeRole(ch.ivyteam.ivy.security.IRole) maybe this helps.</p> <p>best regards </p> <p>Roland</p>rolandThu, 31 Mar 2016 13:34:26 -0400https://answers.axonivy.com/questions/1703/assign-and-revoke-role-to-session-user-dynamically/1704