Extending Permissions to Item Properties
Has anyone successfully extended permissions to the item property level? I need to configure property‑level permissions in Aras Innovator so that modification and visibility of specific properties ...
Forum Discussion
We have some of this configured in our solution, but it is quite difficult to manage within the Aras client. To achieve the stated requirements, you would need a few pieces:
- Get/Discover: Implement a required method onAfterGet that removes the property value if the user cannot get/discover the property.
- Update: This is the trickiest. In Innovator (even with xclass properties) you must have edit permission for the whole item in order to lock/update the item. We have implemented this, but do so by replacing 'update' calls to a custom method that performs the property-specific permissions checks, and escalates internally to allow edit.
- Delete: You didn't mention delete, and I am not sure how that would apply, but that may not be applicable in this case. If it was, you would need to enforce that in a method onBeforeUpdate to prevent setting to null(??)
Once the server-side is figured out, you would need to implement the same in the client forms and grids for the best user experience.
