Skip to main content

I have defined a role that has almost all rights. Only a few tables the role has no rights to. Then it is convenient to hand out all permissions and then for the few exceptions, roll back the permissions. Does that possibility exist?

Hi Marco,

Technically yes but it requires Dynamic model code to get that to work. You could create an "all_rights” role without the checkbox on by fully granting all rights to all tables, column, details, task, task parameters, reports, report parameters, process actions etc. etc. Every Generate definition cycle would recalculate the role rights to ensure it is up-to-date.

The complete list of the overviews you can edit for this to work would be:

  1. role_col_overview
  2. role_cube_field_overview
  3. role_cube_overview
  4. role_cube_view_overview
  5. role_list_bar_grp_overview
  6. role_list_bar_item_overview
  7. role_menu_overview
  8. role_module_grp_overview
  9. role_module_item_overview
  10. role_process_action_overview
  11. role_process_flow_overview
  12. role_report_overview
  13. role_report_parmtr_overview
  14. role_report_variant_parmtr_overview
  15. role_subroutine_overview
  16. role_tab_detail_overview
  17. role_tab_overview
  18. role_tab_prefilter_overview
  19. role_tab_report_overview
  20. role_tab_task_overview
  21. role_tab_variant_col_overview
  22. role_task_overview
  23. role_task_parmtr_overview
  24. role_task_variant_parmtr_overview
  25. role_tile_grp_overview
  26. role_tile_overview

We also have this as a User story on our backlog to implement someday.  

However, if you want to have exceptions it will become a bit more challenging but you could defined some temporary tables with "excluded objects” so that those objects do not receive rights in the role.

For the Software Factory role software_development, we opted using an All-rights role but remove some of the rights via Post synchronization code. That's a more manageble and easy way of supplying an almost all-rights role.

Hi @Marco Kleiweg, does this answer suffice?

Reply


Terms & ConditionsCookie settings