Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

 Security and Permissions

Security can be applied to Actionflows so that only those with sufficient permissions can run the Actionflow. In addition, if an Actionflow is assigned to a button and the user does not have permission to run the Actionflow, the button will not be displayed on a screen. 

Permissions can also be set on form fields, table attributes and screens. For example, if a user does not have permission to view the form fields but runs an Actionflow that uses these fields, the Actionflow will show an error. 

Access Permissions 

For some items, you can specify a user group, e.g. Managers, or set of user groups, where only users in this group(s) have permission to see the item.

You must have saved the property tab at least once before you can change the permissions. 

Access PermissionsDescription
All Users Can View Data

 Tick to allow all users to view this item. 

 Untick to specify the user groups that can access this item. 

User Groups

Available when All Users Can View Data is unticked.

The grid contains a list of user groups that have permission to access to this item. To add a user group to the list:

  1. Click the  icon to list all the user groups in the repository
  2. Drag user groups into this list

To remove a user group from the list, click the tick box next to the user group then click the  icon.

Worked Example

Here's a worked example using the Company Data (available from the Learning Centre).

In this example, we are using:  

  • A Company Merger Pop up screen containing:
    • two manual drop down fields of the company name's of the companies to be merged
    • two string fields showing the company ID's of the companies to be merged
    • a button to initiate the Actionflow - this screen was created using the Tile no Buttons template

If you are completing this chapter as part of the Actionflow course and using a training instance, the data and screens have already been pre-loaded into the Actionflow Advanced Application. For this example, we'll be working on the Company Merger Pop up screen.

Limit Permission to Merge Companies

In this example, we'll limit the users/user groups that can run the Actionflow that merges two companies together.

Prerequisites

For this example, we'll limit permission to run an Actionflow that merges two companies together. This Actionflow was created in 3.04 Bulk Update Action Configuration. If you have not completed this chapter, expand the section below and follow the steps to create the Actionflows.

Alternatively, you can follow the instructions below to limit access to any Actionflow in your application.

 Bulk Update Company Acquisition Actionflow

Error rendering macro 'excerpt-include' : No link could be created for '3.04 Bulk Update Action Configuration'.

Create Limited Access User

  1. In the  Full Repository, expand the  Users section 
  2. Click  to create a new user who will not have access to run the acquisition
    1. Login: limitedaccess
    2. First Name: Limited
    3. Surname: Access
    4. Password: Phixflow123!
    5. Enabled: 
    6.  Apply the user
    7. In the User Groups section, click the icon
      1. Drag across the User Groups, Actionflow Advanced Application and Users into the User Groups section of the Limited Access user
        1. There will be two Actionflow Advanced Application user groups. Ensure the one ending _Admin is not chosen
    8.  Apply and Close all tabs

Change Actionflow Permissions

  1. Open the Company Merger Pop up screen and open the Actionflow on the Run Acquisition button
  2. Open the Actionflow  Properties
  3. Click on the  Security tab
  4. Disable  All Users can Run Action
  5. Click the  icon and drag across the User Group, Actionflow Advanced Application_Admin into the User Groups section of the  Security tab 
    1. This limits the permission to run this Actionflow to just this User Group

Testing

  1. Log out and login as the user, Limited Access
    1. You should not be able to see the Run Acquisition button on the Company Merger Pop up screen


3.08 For Each Action Configuration

  • No labels