Forum Discussion

Nathan_H_'s avatar
Nathan_H_
Ideator I
3 years ago
Solved

Javascript Temporary Permissions

Good day all.  I'm still using v11 SP10.  How do I grant temporary permission for a user through Javascript?  I want to add a Comments tab to our custom change ItemType.  I have a script attached to ...
JavaScript
Permissions
  • AngelaIp's avatar
    AngelaIp
    3 years ago

    You cannot grant temporary permission for a user through Javascript. In general this is impossible.

    Just image somebody builds his own Aras Client and is able to influence permission this way. This way regular users could transform themselves into root accounts. Would be a great way to hack a system!

    What you want do is not a uncommon task. I do the same in my own dialog calls. You need an additional Server Method that is called from the dialog. The Server Method uses GrantPermission so you can execute the query with Aras PLM or similar rights. You should be able to find GrantPermission samples online. Even Aras use this technique.

     

  • Nathan_H_'s avatar
    Nathan_H_
    3 years ago

    Angela,

    Thanks for confirming this.  I had thought that was the case.

AngelaIp's avatar
AngelaIp
Ideator I
3 years ago

You cannot grant temporary permission for a user through Javascript. In general this is impossible.

Just image somebody builds his own Aras Client and is able to influence permission this way. This way regular users could transform themselves into root accounts. Would be a great way to hack a system!

What you want do is not a uncommon task. I do the same in my own dialog calls. You need an additional Server Method that is called from the dialog. The Server Method uses GrantPermission so you can execute the query with Aras PLM or similar rights. You should be able to find GrantPermission samples online. Even Aras use this technique.

 

  • Nathan_H_'s avatar
    Nathan_H_
    Ideator I
    3 years ago

    Angela,

    Thanks for confirming this.  I had thought that was the case.

    • AngelaIp's avatar
      AngelaIp
      Ideator I
      3 years ago

      Check out my Method call collection:

      https://plm-underground.com/method-calls

      It doesn´t include the grant permission stuff, but shows how to return and use the results/items. It´s an old article, but the calls haven´t changed much (especially when you use an Innovator 11 dinosaur).

      • Nathan_H_'s avatar
        Nathan_H_
        Ideator I
        3 years ago

        Thank you!