Non persistent type doesn't appear in combobox for targettypes with SecurityComplex

Hello Dominic,
Thank you for the sample project. We have found that the SecurityComplex is not designed to manage access permissions for non persistent objects. As you can see there is only the "Persistent Permissions" tab.
By default both SecurityComplex and SecurityStrategyComplex exclude non persistent types from permissions by checking the typesInfo.IsPersistent property:

C#
if(currentType == typeof(object)) {  
                if((objectType != null) && typesInfo.FindTypeInfo(objectType).IsPersistent) {  
                    ParticularAccessItem persistentBaseObjectItem = FindExactItem(PermissionTargetBusinessClassListConverter.PersistentBaseObjectType, access);  
                    if(persistentBaseObjectItem != null) {  
                        return persistentBaseObjectItem;  
                    }  
                }  
            }  

In the new SecurityStrategyComplex we have represented the AdditionalSecuredTypes static collection which allows you to add non persistent types.

So that is why non persistent types are shown in the SecurityStrategyComplex but not in the SecurityComplex.

Please let me know if you need further assistance.

Hello, maybe this solution will be helpful for somebody:
XAF uses TypePropertyEditor for properties of System.Type type. The list of available types that shown in drop down of this property editor is defined by Type Converter that is specified as attribute on the property.
The ObjectAccessPermission.ObjectType property decorated by PermissionTargetBusinessClassListConverter Type Converter.
The idea is to create own TypeConverter class and specify it for ObjectAccessPermission.ObjectType property instead of default one using approaches described in Customize Business Object's Metadata. Here is code (tested in DevExpress v11.1):

C#
//override CustomizeTypesInfo method of module or controller  
public override void CustomizeTypesInfo(ITypesInfo typesInfo)  
{  
    base.CustomizeTypesInfo(typesInfo);  
    var permissionType = typeof(DevExpress.ExpressApp.Security.ObjectAccessPermission);  
    var permissionTypeInfo = typesInfo.FindTypeInfo(permissionType);  
    var objectTypeMemberInfo = permissionTypeInfo.FindMember("ObjectType");  
    var attr = objectTypeMemberInfo.FindAttribute<System.ComponentModel.TypeConverterAttribute>();  
    //First add new attribute than remove old. Otherwise removed attribute will be added back (may be bug)  
    objectTypeMemberInfo.AddAttribute(new System.ComponentModel.TypeConverterAttribute(typeof(AllBusinessObjectsTypeConverter)));  
    if (attr != null)  
        ((BaseInfo)objectTypeMemberInfo).RemoveAttribute(attr);  
}  

//...  

//this is custom TypeConverter  
public class AllBusinessObjectsTypeConverter : LocalizedClassInfoTypeConverter  
{  
    public override StandardValuesCollection GetStandardValues(ITypeDescriptorContext context)  
    {  
        // Below is just example of how to retreive required types.  
        // It is not good idea to retrieve all available non persistent types  
        // because there is a lot of build-in non persistent types that supports XAF infrastructure  
        // and otherwise they will litter the drop-down list of types.  
        // Here types are retreived from ApplicationModel that obtained from CaptionHelper.  
        // It's not so good. You can retrieve required types using XafTypesInfo class.  
        var model = CaptionHelper.ApplicationModel;  
        if (model != null)  
        {  
            var types = new List<Type>();  
            types.Add(PermissionTargetBusinessClassListConverter.CommonBaseObjectType);  
            types.Add(PermissionTargetBusinessClassListConverter.PersistentBaseObjectType);  
            var bOTypes = model.BOModel  
                .Select(cl => cl.TypeInfo)  
                .Where(t => t.IsVisible && t.Type != null)  
                .Select(t => t.Type);  
            types.AddRange(bOTypes);  
            return new StandardValuesCollection(types);  
        }  

        return base.GetStandardValues(context);  
    }  

    protected override string GetClassCaption(string fullName)  
    {  
        var typeInfo = XafTypesInfo.Instance.FindTypeInfo(fullName);  
        if (typeInfo != null)  
        {  
            if (typeInfo.Type == PermissionTargetBusinessClassListConverter.CommonBaseObjectType)  
                return PermissionTargetBusinessClassListConverter.CommonBaseObjectTypeCaption;  

            if (typeInfo.Type == PermissionTargetBusinessClassListConverter.PersistentBaseObjectType)  
                return PermissionTargetBusinessClassListConverter.PersistentBaseObjectTypeCaption;  
        }  

        return base.GetClassCaption(fullName);  
    }  
}