Amitosh Tripathy さんのグループアクティビティ

Load xClass and xProperties, and link xProperties to multiple xClasses from AML

Amitosh Tripathy — Tue, 23 Jul 2019 14:29:26 GMT

We want to load 1k+ xclasses to Aras, we are talking about 4k+ xproperties here.

When we are running AML for creating relations xClass_xProperty_Flatten and xClass_xPropertyDefinition to link them to class tree, it fails with error :

<af:legacy_detail><![CDATA["xClass_xProperty_Flatten" can be added or deleted or updated only in XTree context]]></af:legacy_detail>

<af:exception message=""xClass_xProperty_Flatten" can be added or deleted or updated only in XTree context" type="System.ArgumentException" />

</detail>

I can load property definitions, but not classes, but can’t map the properties to classes. How can we mass create and reuse these xProperty definitions in more than one class from AML, by creating relations correctly?

How do update item in Dom after server Method changed values of a Form dropdown

AngelaIp — Fri, 13 Dec 2019 09:50:13 GMT

Hi community,

hope somebody can help me on this one. I have a Form with a button that shall allow users to add additional values to the dropdown list. The button Client Method calls a 2nd Server Method that takes care for updating the List that is used in the dropdown. Used Innovator version is 12SP3, but I think my described scenario fits to most Innovator versions.

The List update on server side works without any problems. The List will contain the new values on database level. But I am not able to update/refresh the dropdown list in the Form. Users still see the previous content. If users want to see the new updated List, they have to delete their browser cache completely. Neither the refresh button or reopening the item will make the additional list content visible. The only way the list will be updated without deleting the browser cache is when I manually save the List item again.

How can I solve this one? I assume I will need to use aras.isDirtyEx or something similar. But I haven´t found much code samples on this one. Any ideas how to do this?

Angela

Mobile App for Innovator just released - AccessPLM

necton.labs — Sun, 29 Sep 2019 11:52:01 GMT

Hello world!

I've just released a mobile app for Innovator that I've been working on for a while. It's called AccessPLM, it's currently only available on iOS but an Android version shouldn't be too far off.

The app can be viewed on the app store, or previewed here: https://apps.apple.com/us/app/accessplm/id1436012502?ls=1

For the initial release I've chosen to focus on a few core elements, namely Parts, Documents, Problem Reports and the In Basket. The app lets you view Parts (and the associated BOM), Documents and PRs, and edit some standard properties for all of them as well. You can also view and complete any items in your In Basket.

You can also view Files (PDFs and images) that are attached directly to Documents or PRs, or attached to an Item that is related to a Part (for example, it will show you all the files attached to all CAD Document items associated with a particular part).

The final feature I've implemented that's unique to mobile is the ability to take, markup and upload images from your phone all within that app, and attach them to an existing Problem Report, or a new PR you've created with the app.

For administrators - I've added the ability to disallow editing of items in the app, if you decide you only want to have users view data but not be able to edit anything. Users will still be able to lock and unlock items.

I'm really keen to get some feedback and hear what people think - it's not easy to narrow down use cases on a system that's as expansive and flexible as Aras Innovator. If you think the app is useful, or if you wish it did something else, or you have any other comments at all, I'd love to hear from you! Send me a message on here or email me at necton dot labs at outlook dot com

Cheers,

Ben

Token Authentication using the REST API

Christopher Gillis — Thu, 02 May 2019 12:30:00 GMT

Aras Innovator introduced an Authentication Server feature in 11.0 SP12 and has been fleshing it out with each new service pack. In 11.0 SP15, it is possible to request an OAuth token from this server that can be used with the RESTful API as an alternative to basic authentication. Using tokens is preferred for external apps as they don't require you to keep your users' passwords in memory while your app runs. Because tokens expire after a set time, you can also rest assured that if a malicious party later acquires the token, they won't have access to your system.

In this blog post, we'll be going over examples of both requesting an OAuth token from the Aras Innovator server as well as using that token to authenticate additional requests. You can also check out this Authentication Example on GitHub for a simple app that will request a token and use that token to query the Parts in a database.

Register Your App

One of the features of the Authentication Server is to limit what apps can request a token. The Authentication Server keeps a list of registered apps that are able to request tokens, so external applications cannot get tokens by default. If you don't wish to do any additional configuration, you can use the default "IOMApp" client registry. However, we recommend adding a new client registry to register your app with the server by following the steps below.

Open the \OAuthServer\OAuth.config in your preferred text editor
Scroll down to the bottom until you see <clientRegistry id="IOMApp">
Copy this node and all of its child nodes
Paste them as a new section just below the original node
Give a new ID to this registry corresponding to the purpose of your app
Make sure this new registry has enabled="true"

Make note of the ID you give this new registry. You will need to use it in the body of your request for a token which is covered later in this blog.

Get the OAuthServer URL

The first thing we'll want to do is query for the location of the OAuthServer. Because Aras Innovator allows most of its components to exist on separate servers, the OAuthServer may not be available from the same server as our Instance URL. However, the Innovator Server does have a way to query for this information by appending /Server/OAuthServerDiscovery.aspx to the end of your Instance URL: http://localhost/InnovatorServer/Server/OAuthServerDiscovery.aspx .

If you're using something like Postman to follow along with this blog, you can simply perform a get request on this URL with an empty body. The result of this request should look something like below.

{
"locations": [
{
"uri": "http://localhost/InnovatorServer/oauthserver/"
}
]
}

The URL we will use is stored in the uri property of the JSON returned from our request. The JSON path you can use to retrieve this information is locations[0].uri.

Get the Token Endpoint

Now that we have the URL of the OAuthServer, we will need to retrieve the exact URL that we can use to query for the token. This next URL is based on the OpenID discovery specification. We will take the OAuthServer URL from our previous step and append .well-known/openid-configuration to the end of it: http://localhost/InnovatorServer/oauthserver/.well-known/openid-configuration. Again, we can query on this URL with a simple GET request without passing anything through the body.

The response to this request is significantly longer, but it should contain our token endpoint somewhere near the top.

{
"issuer": "OAuthServer",
"jwks_uri": "http://localhost/InnovatorServer/oauthserver/.well-known/openid-configuration/jwks",
"authorization_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/authorize",
"token_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/token",
"userinfo_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/userinfo",
"end_session_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/endsession",
...

The JSON path to retrieve this data is simply token_endpoint.

Get Token

The final request we'll use to retrieve our token will use the token endpoint URL retrieved in the previous step. Because this token will be linked to a user's credentials, we will need to pass in additional information before making our request. If you're following along with Postman, you can use the Multipart Form to specify the following pieces of information in your body.

grant_type : "password"
- Currently, I believe "password" is the only authentication type allows. Aras as a whole is moving towards more types of authentication in 12.0, so this is likely to change in the upcoming releases.
scope : "Innovator"
- The scope of information this token will be able to access. "Innovator" will be used for almost all purposes.
client_id : "IOMApp"
- The ID of your client app you configured in the first step of this blog.
username : "YOUR_USER_NAME"
- Any requests made using the returned token will share the same permissions as this user
password : "YOUR_MD5_HASHED_PASSWORD"
database : "YOUR_DATABASE_NAME"
- This should be the name of the database that this token will be able to access. "InnovatorSolutions" is the default name of Aras databases.

After configuring your body, you can send a POST request to the token endpoint URL with the body containing the properties defined above. The response will contain both the OAuth token as well as how long you will have until that token expires.

{
"access_token": "YOUR_TOKEN",
"expires_in": 3600,
"token_type": "Bearer"
}

The JSON path to this token will be access_token. By default, the IOMApp token expires in 3600 seconds or 1 hour.

Make Request with Token

If you've ever used our previous RESTful blog, you'll know that we authenticated previously by passing in the username and hashed password into the AUTHUSER and AUTHPASSWORD headers respectively. With the token, we will authenticate using the standard HTTP Authorization header. Token authentication using this header follows the format below.

Authorization : Bearer {YOUR_TOKEN}

Note that the word "Bearer" must come before your token in the header. If you're using Postman, there should be a way to configure authentication differently than other headers which should automatically add in this word for you. Alternatively, depending on the programming language you're using to perform this request, there may be a special authentication class or library which will automatically add "Bearer" into the header for you as well.

Regardless, once you have your Authorization header configured, you can follow along with our previous RESTful blog, and you should notice that you can query for all of the same information. You can also confirm that the permission model is still in place by querying for items to which you do not have access.

LOOKING FOR MORE ARAS INSPIRATION?

Subscribe to our blog and follow @ArasLabs on Twitter for more helpful content! You can also find our latest open-source projects and sample code on the Aras Labs GitHub page.

Access Control In Aras Innovator

AJ Sebastian — Tue, 19 Mar 2019 13:00:00 GMT

Controlling access is one of the bigger puzzles any system administrator faces. There are two different challenges to consider when it comes to permissions. The first challenge is authentication, which involves ensuring the user is who they say they are. The second challenge is authorization, which deals with what a user can or cannot have access to. The standard Aras permission model and our two new access control policies provide configurable solutions to the latter - authorization.

This blog will be a high-level overview of the three types of access control built into the Aras Innovator platform: role-based permissions, MAC policies, and DAC policies. Future posts will go more in-depth and explain how you can use these services to implement common use cases.

Role-Based Access Control

The standard permissions model, an example of role-based access control, revolves around the Permissions ItemType. These permissions will be assigned to an ItemType and will dictate how different identities can interact with the given ItemType. Below is a standard permission named “New Part.” Different groups and individual identities have different levels of access, and this can change based on the life cycle state of the part itself. Standard permissions are powerful but cannot vary based on the context item.

Mandatory Access Control

Mandatory Access Control (MAC) policies are attribute-based, meaning access can be defined based on properties/attributes of both the user and any item the user is viewing. This allows for military-style security scenarios, where a user with a high security clearance level may access items with a lower security clearance level, even though they may not have access provided by the explicit permissions defined on the item. This image shows how a MAC policy can be used to restrict access on documents with a "top secret" clearance level while allowing all users access to unclassified documents.

MAC policies also allow admins to restrict a user's access based on their physical location. A user with read/write access in their primary facility may only have read access at other sites.

Domain Access Control

Domain Access Control (DAC) was designed to support project-based access scenarios where users are given access to items related to individual projects or domains. These domains are dynamic, allowing the permissions to shift with the scope of a project. The image below shows how a DAC policy should work.

Each project in the above example could have its own DAC definition, meaning each project can have its own specific policy. Each user can be a member of multiple teams, giving them access to multiple projects. DAC policies work out of the box with the other two types of access control. Combining all three methods is the best way to ensure that authorized users are the only ones with access to the correct items. With proper configuration, you can have more complex policies, which allow for something similar to the diagram below.

Closing Thoughts

These policies have a lot of moving parts. Configuring any of these solutions will take some trial and error to find the best fit for your situation. This has been a very brief conceptual overview of the different types of access control within Aras Innovator. In the coming weeks, we'll publish examples of both MAC and DAC policies. We'll also be releasing a community project which has examples of both types of policy.

Enterprise search queries

Amitosh Tripathy — Tue, 04 Feb 2020 17:05:15 GMT

I have 3 questions here (Aras 12.3)

- What is the best way to stop File Indexing? I have installed File Processor already, should I go ahead and remove ES Indexed File from all Indexed Configuration item type or just stopping the File Crawler will do? How do I get rid of the files already indexed?

- I went with 1 Solr node on cluster, and 3 zookeepers. Best practice for Prod is to have more than one Solr nodes or one would suffice since we do not want Files?

- We have seen in our POC environment if we load a million parts, the indexing will take a week or so for all new items. We have a standalone Solr instance where we can do it in an hour for all the same properties. I was thinking if we can directly index Aras data by running something in Solr side and not wait for the ES agent?

Eli Donahue Christopher Gillis

How to pin TOC by default in Innovator 12?

AngelaIp — Mon, 13 Jan 2020 08:04:10 GMT

Hi community,

When users login to Innovator 12 the first time, they only get a huge white welcome page with deactivated TOC. This is confusing, as people may think Innovator is not working. I remember my first steps with Innovator 12. I was literally waiting 3 minutes cause I assumed Innovator is still loading. I even assumed the installation went wrong and checked the browser debugger for potential error messages. I needed an eternity until I finally accidentally clicked on the main navigation button in the top left corner to get the TOC.

I want to avoid that my users face the same frustrating experience. Is it possible to pin the TOC by default? I have discovered that the ItemType Core_GlobalLayout contains the property core_toc_pinned. This one is used to store the preference for the pinned TOC. I changed the default value of this property from 0 to 1, but this customization is not enough to pin the TOC by default. The preferences are set when users log out, so we cannot use the default value in the ItemType for this purpose.

There are some codetree files that reference to this property. I assume one of them also sets the "real" default value for the property. Does anybody know where I can do this customization?

Many thanks!

Angela

How to render a boolean field in a form as HTML with images or colored text

Amitosh Tripathy — Fri, 06 Sep 2019 14:53:22 GMT

has_change_pending in Part/CAD/Document forms is a check box. I want to make it

- An image, if true show one image, if false show another

- A colored text, if true show in one color, if false show in another color

Trying with making the field as HTML and add some tags, not much familiar with them, so wanted to ask here.

Remove Relation from older generations

Amitosh Tripathy — Tue, 13 Aug 2019 19:56:16 GMT

My CAD is in Rev A Generation 1

It was added to a part on Rev A Generation 2, and was removed in Generation 3 of the part. Currently part is in Generation 4.

I want to delete the CAD, but it gives me error : "

Note : CAD relation is Hard Fixed out of the box.

How do I take care of deleting such related items?

The CAD item shows the part in UI(field name : part) which is HTML, and is a link to the part Rev A Generation 2. Can I may be create admin form to allow removal of relation from UI? Or there is a cleaner way to do it?

Relative date search

rneuber1 — Mon, 12 Dec 2016 11:34:24 GMT

Hi all, we had the requirement to be able to search for relative Dates, for example: "Modified within the last week" or "Due within the next 30 days". Aras (9.4 in our case) does not support that, so we've hacked it ourselves, maybe it can be useful for others, too. For our users it is sufficient to use it within AML queries, so there is no fancy UI needed. With the patch described below it is possible to use '@today(offset)' to write queries like: <modified_on condition="ge">@today(-1)</modified_on> (Modified since yesterday) or

<and>
   <due_date condition="ge">@today()</due_date>
   <due_date condition="le">@today(7)</due_date>
</and>

(due next week) To achieve this, simply edit Innovator\Client\javascript\search_container.js and add the following snippet after line 642:

// Search for any @{n} parameter in Aml.
var re = new RegExp();

// Check for relative dates: @today{-20} will be replaced with the date of 20 days before today
if (/@today\((-?\d+)\)/g.test(searchAml))
	{
		var reDate = new RegExp("@today\\((-?\\d+)\\)","g");

		var m;
		while (m = reDate.exec(searchAml))
		{
			var diff =  parseInt(m[1]) ;
			var foundString = m[0];
			var today = new Date();
			var relDate = new Date();
			var toff = relDate.getTimezoneOffset();
			relDate.setDate(today.getDate() +  diff);
			relDate.setHours(0,-1 * toff,0,0);
			var nd = relDate.toISOString();
			nd = nd.substr(0,nd.length - 5); // Remove .000Z
			searchAml = searchAml.replace(foundString, nd);
		}

Any comments are welcome. \Ralf

Extended Classification issue

Amitosh Tripathy — Wed, 03 Jul 2019 17:31:45 GMT

Hi,

Trying to set up a small tree. I could build the tree with 6 classes, and 10 attributes with attribute inheritance from parent to child class. But I am not able to Restrict Selection To Only Leaf Classes

Restrict Selection To Only Leaf Classes set to true

Restrict Selection To A Single Class set to true

Error : apply "Restrict Selection to only Leaf Classes" preference for the "XXX" xClassificationTree because there are items with conflicted classification.

Anyone saw this before?

getPreferenceItemProperty and setPreferenceItemProperty

Amitosh Tripathy — Thu, 23 May 2019 14:48:46 GMT

Hi,

I am implementing a Generic action form UI to let user pick his default group among multiple groups he belongs to.

I could achieve it with adding a property to Core_GlobalLayout and write getter and setter for this with sql, but when I use API setPreferenceItemProperty / getPreferenceItemProperty, the value does not get saved or retried.

Also, I could not find in documentation if these APIs store and retrieve from client cache(in case database transaction happens only during logout) or from database. In my case, if any CAD connector or external system needs access to this property, I want to make sure I know when it goes to database.

Anyone has any previous experience with these APIs?

Let me Help You

Wed, 22 May 2019 07:06:19 GMT

Answer a question that is verified as helpful or correct.

What´s the best way to check that two or more properties are unique?

AngelaIp — Thu, 16 May 2019 16:52:25 GMT

Hi Community,

maybe somebody knows a simple solution for this use case. My Part table has the following properties. Nothing really exotic:

item_number | erp_number | major_rev | name | ..

Both item_number and erp_number shall be unique values. When I tick the unique checkbox in the ItemType definition for both properties, a combination of the two properties will be used for the uniquness check.

There are use cases were this kind of unified uniquenss check is extremely helpful, like Part Goals. But in my use case I want to check item_number and erp_number indepented for their uniqueness.

What´s the most easy way to achieve this? Is there a way to prevent using a Method?

Thanks for any idea!

Angela

Implementing User Options like Choose CM Options

Amitosh Tripathy — Tue, 21 May 2019 18:53:00 GMT

I am working on a user option dialog where they can pick and choose some values[logged_in_group to start with]

I have created placeholder properties in Core_GlobalLayout for this. Get_IdentityMembership_Details and Get_AllGroups_Details works fine, GetStoredValueForGroup(The users that do not have a preference created for their identity, I am mapping to World) works too. But I have 2 issues :

- The dropdown in my UI Form is not resizing based on values added, its defined as static inside a Group Box, with x and y co-ordinates as 0,0. But without Group Box too I could not make it hold to a fixed width.

CSS for the dropdown:

{$this field rule} .sys_f_label_container
{
width: 110px;
}

{$this field rule}
{
margin: 5px 0px 5px 0px;
}

{$this field rule} select
{
width: 110px;
}

- After user selects the value, I am not able to capture it. I have a ChooseUserOptionsDialog.prototype.SaveUISelection function, but how to capture the value coming from UI here?

=================================

Below is the code for this form onLoad

ChooseUserOptionsDialog = function ()
{
var inn = new Innovator();
var userid = inn.getUserID();

var logged_in_group = getFieldComponentByName("logged_in_group");
var listGroupsDropDown = [];

document.isEditMode = true;

================================

Below is the code for Ok button

ChooseUserOptionsDialog.prototype.ApplyChanges = function ChooseUserOptionsDialog_ApplyChanges()
{
this.SaveUISelection();
top.main.tree.updateTree();
parent.args.dialog.close();
};

ChooseUserOptionsDialog.prototype.SaveUISelection = function ChooseUserOptionsDialog_SaveUISelection()
{
debugger;
var inn = new Innovator();
var userid = inn.getUserID();

var groupComponent = getFieldComponentByName("logged_in_group", "");
var userSelectionGroup = groupComponent.value;//Value not getting retrived

var body = "<sessionuser>" + userid + "</sessionuser>";
body = body+ "<usergroup>" + userSelectionGroup + "</usergroup>";
var res = aras.applyMethod("Set_UpdateUserPreference",body);

var resItem = aras.IomInnovator.newItem(); // Create a new empty item
resItem.loadAML(res); // and then load in the string returned from aras.applyMethod

if (resItem.isError()) {
aras.AlertError(resItem);
return null;
}
};

Amitosh Tripathy さんの グループ アクティビティ

Load xClass and xProperties, and link xProperties to multiple xClasses from AML

How do update item in Dom after server Method changed values of a Form dropdown

Mobile App for Innovator just released - AccessPLM

Token Authentication using the REST API

Register Your App

Get the OAuthServer URL

Get the Token Endpoint

Get Token

Make Request with Token

LOOKING FOR MORE ARAS INSPIRATION?

Access Control In Aras Innovator

Role-Based Access Control

Mandatory Access Control

Domain Access Control

Closing Thoughts

Enterprise search queries

How to pin TOC by default in Innovator 12?

How to render a boolean field in a form as HTML with images or colored text

Remove Relation from older generations

Relative date search

Extended Classification issue

getPreferenceItemProperty and setPreferenceItemProperty

Let me Help You

What´s the best way to check that two or more properties are unique?

Implementing User Options like Choose CM Options

Amitosh Tripathy さんのグループアクティビティ