How does the permission system work on database level?
Hi Community, In Innovator, we can use permissions to specify which users are allowed to view, edit, or delete an item. I have a federated item type with a custom onGet method. Since SQL federation with onGet bypasses the standard permission system, any restrictions have to be implemented within the SQL query itself. I am wondering whether it is possible to customize my federation solution to support the existing permission framework. In my case, I would like to use the built-in identities such as "Creator", "Owner", and "Manager" to provide a more "natural and consistent permission experience". This leads to the question: How does Innovator actually enforce permissions? In the end, all regular data comes from SQL tables, so Aras must be applying some kind of security logic at the database level. I did some research and discovered the following: In SQL Server, there are "secured" versions of the regular tables that combine the underlying data with the results of the innovator.EvaluatePermissions function. My theory is that when a user requests data (for example, "Show me Parts"), the data is not retrieved directly from the innovator.Part table, but rather through the secured.Part function. Has anyone ever tried to replicate this mechanism in the context of federation? Any tips or ideas? Angela
Invisible product menu in the TOC
Hi All, We've just added new user as design engineer account by super user (root). And log in by new sample user who is design engineer. But product menu is invisible from this new user. I think my process is not correct. <design engineer account > 1. add user 2. add identity as super user. 3. add team member in the engineering team by Team menu. Best Regards!Extended Properties Permissions Issue
Hi Team I have configured extended properties for Part Item type and I'm able to select and add the xProperties in Part item using super user. But when I try to get / add xProperties using normal user, I was not able to get or add the xProperties. I'm getting the below error You have insufficient permissions to perform 'classify' operation for item id '46F261DDEDEA40F784EA2C51687BB519' by xClass id 'F4C365C728574ADEAE8EB1C4E5A50D25'. Attached screenshot as normal user and super user for reference. Do I need to add permission anywhere to see / add xProperties on Part as normal user ? Thank You
