Enhancement
Major
Detail
Detail
Enhancement
Access to the AccessManager via TL script is required, e.g. to be able to query whether the current user has certain roles on certain objects.
For example, a list or table must be filtered so that the user is not shown all objects of a type, but only those to which he is authorized (has a specific role).
Implementation
A TL script function filterSecurity is offered with which a list of specialist objects can be filtered for authorizations. Input parameters:
- objects: One or more specialized objects to be filtered
- roles: One or more roles or role names of which the user must have one on the specialist object for it to be included in the result set.
- account (optional): The user who must have one of the roles on the specialized objects. If no user is specified, the logged-in user is used.
Test
TestFilterSecurity.script.xml