BuyLog In
Bug Report B209005
Visible to All Users

SecurityStrategyComplex: Cannot save after modifying a property that is mentioned in an ObjectAccess Permission

created 13 years ago

Hello,
I created a new Role and gave Read rights to all objects. For one BO i gave an object permission Write with Criteria = [Offerte Status] = 'In bewerking' (an enum).
Logging in as a user with this role, I am able to modify the objects that obey to this permission.
When i modify [Offerte Status] (with a state machine) immediately all properties become disabled, which is good.
But i cannot save the object due to the same permission, which is not good.
How can i solve this?
Willem

Show previous comments (1)
DevExpress Support Team 13 years ago

    Hi Willem,
    Please accept my apologies for the delayed response. A modified object cannot be saved because it in its current state does not fit the permission criterion. This behavior is by design.
    To accomplish this task, you can declare the security role as follows:
    - Grant the Read access permission for this type.
    - Create an object permission with the Write assess granted and Criteria set to [Offerte Status] = 'In bewerking'.
    - Create a member permission with Write granted for the [Offerte Status] property.
    If you also need to disable the state change capability for this role, use the IsCurrentUserInRole function in the state's TargetObjectCriteria property.
    Please let me know if this solution meets your requirements.
    Thanks,
    Michael.

    W W
    Willem de Vries 13 years ago

      Hi Michael,
      The TargetObjectCriteria property of the State seems to be read-only.
      How can i modify it?
      Willem

      DevExpress Support Team 13 years ago

        Hi Willem,
        It is not read-only in existing implementations. Please refer to ticket Restrict State options by Role.
        Thanks,
        Michael.

        Sign in to comment on this post

        Disclaimer: The information provided on DevExpress.com and affiliated web properties (including the DevExpress Support Center) is provided "as is" without warranty of any kind. Developer Express Inc disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.

        Confidential Information: Developer Express Inc does not wish to receive, will not act to procure, nor will it solicit, confidential or proprietary materials and information from you through the DevExpress Support Center or its web properties. Any and all materials or information divulged during chats, email communications, online discussions, Support Center tickets, or made available to Developer Express Inc in any manner will be deemed NOT to be confidential by Developer Express Inc. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.