Insert excerpt
_security_icon _security_icon nopanel true

 Security and Permissions

Security can be applied to Actionflows so that only those with sufficient permissions can run the Actionflow. In addition, if an Actionflow is assigned to a button and the user does not have permission to run the Actionflow, the button will not be displayed on a screen. 

Permissions can also be set on form fields, table attributes and screens. For example, if a user does not have permission to view the form fields but runs an Actionflow that uses these fields, the Actionflow will show an error. 

Access Permissions 

For some items, you can specify a user group, e.g. Managers, or set of user groups, where only users in this group(s) have permission to see the item.

Worked Example

Here's a worked example using the Company Data (available from the Learning Centre).

In this example, we are using:  

• A Company Merger Pop up screen containing:
  • two manual drop down fields of the company name's of the companies to be merged
  • two string fields showing the company ID's of the companies to be merged
  • a button to initiate the Actionflow - this screen was created using the Tile no Buttons template

Limit Permission to Merge Companies

In this example, we'll limit the users/user groups that can run the Actionflow that merges two companies together.

Prerequisites

For this example, we'll limit permission to run an Actionflow that merges two companies together. This Actionflow was created in 3.04 02 Bulk Update Action Configuration. If you have not completed this chapter, expand the section below and follow the steps to create the Actionflows.

Alternatively, you can follow the instructions below to limit access to any Actionflow in your application.

Create Limited Access User

1. In the 

   Insert excerpt
   _repository _repository name full nopanel true

   , expand the 

   Insert excerpt
   _user _user nopanel true

    section 
2. Click 

   Insert excerpt
   _add_icon _add_icon nopanel true

    to create a new user who will not have access to run the acquisition
   1. Login: limitedaccess
   2. First Name: Limited
   3. Surname: Access
   4. Password: Phixflow123!
   5. Enabled: 

      Insert excerpt
      _toggle_on _toggle_on nopanel true

   6. Insert excerpt
      _save _save nopanel true

       the user
   7. In the User Groups section, click the 

      Insert excerpt
      _user_group _user_group name icon nopanel true

      icon
      1. Drag across the User Groups, Actionflow Advanced Application and Users into the User Groups section of the Limited Access user
         1. There will be two Actionflow Advanced Application user groups. Ensure the one ending _Admin is not chosen

   8. Insert excerpt
      _finish _finish nopanel true

       all tabs

Change Actionflow Permissions

1. Open the Company Merger Pop up screen and open the Actionflow on the Run Acquisition button
2. Open the Actionflow 

   Insert excerpt
   _property_settings _property_settings nopanel true

3. Click on the 

   Insert excerpt
   _property_tabs _property_tabs name security nopanel true

4. Disable 

   Insert excerpt
   _toggle_off _toggle_off nopanel true

    All Users can Run Action
5. Click the 

   Insert excerpt
   _user_group _user_group name icon nopanel true

    icon and drag across the User Group, Actionflow Advanced Application_Admin into the User Groups section of the 

   Insert excerpt
   _property_tabs _property_tabs name security nopanel true

    
   1. This limits the permission to run this Actionflow to just this User Group

Testing

1. Log out and login as the user, Limited Access
   1. You should not be able to see the Run Acquisition button on the Company Merger Pop up screen

3.08 For Each Action ConfigurationImage Added