For example you could use the following JS script. It should be declared in Global scope, no need to copy it for each table:
// Called during validation of request (fetching) for a data table. Should return true if access to the table should be allowed
function onValidateDataTableAccess(name, parameterNames, parameterValues, currentAllowed)
{
// session['AccessRights'] = 'Orders';
return session['AccessRights'].split(',').indexOf(name) >= 0;
}
// Called for each delta on the server before it's applied
function beforeProcessDelta(delta)
{
// session['AccessRights'] = 'Orders,Orders-rw';
if (session['AccessRights'].split(',').indexOf(delta.name + '-rw') < 0)
fail('You cannot update the table ' + delta.name);
}
A few notes:
If there are, say, a dozen of tables in the Schema, but only 2 of them should have restricted access, then you’d need to add code like
if (name.toUpperCase() !== 'My_Filtered_Table'.toUpperCase())
return true;
This is needed to prevent filtering code execution for tables that don’t need it.
onValidateDataTableAccess is called on each ‘GetData’ access to the table, beforeProcessDelta is called on each data update attempt.
Also I’d suggest to upper-case the strings you compare to prevent false-positive (or, much worse, false-negatives) check results.
I see that the “rights” are “recived” MEMBER,TESTIMONY,MINUTES
// Called during validation of request (fetching) for a data table. Should return true if access to the table should be allowed
function onValidateDataTableAccess(name, parameterNames, parameterValues, currentAllowed)
{
log('AccessRights = ' + session['Login.description'] + '');
if (name.toUpperCase() !== 'MEMBER,TESTIMONY,MINUTES'.toUpperCase())
return true;
return session['Login.description'].split(',').indexOf(name) >= 0;
}
// Called for each delta on the server before it's applied
function beforeProcessDelta(delta)
{
if (session['Login.description'].split(',').indexOf(delta.name + '-rw') < 0)
fail('You cannot update the table ' + delta.name);
}
I still have Access to the Tables…
I am sure i ammissing something…
function onValidateDataTableAccess(name, parameterNames, parameterValues, currentAllowed)
{
name = name.toUpperCase();
if ('MEMBER,TESTIMONY,MINUTES'.split(',').indexOf(name) < 0)
return true;
return session['Login.description'].split(',').indexOf(name) >= 0;
}
function beforeProcessDelta(delta)
{
var name = delta.name.toUpperString() + '-RW';
if (session['Login.description'].split(',').indexOf(name) < 0)
fail('You cannot update the table ' + delta.name);
}
Btw if you store string ‘MEMBER,TESTIMONY,MINUTES’ in LDAP then you won’t have write access to the tables (as per your initial post). Full read-write rights line would be ‘MEMBER,TESTIMONY,MINUTES,MEMBER-RW,TESTIMONY-RW,MINUTES-RW’
I would like to show in the Client if he has write access to the table.
if tbl_member.ReadOnly =true then
frm_member.lbl_status_led.Caption:='read only';
if tbl_member.ReadOnly =false then
frm_member.lbl_status_led.Caption:='read write';
With the Settings on the Server ( in the previus Post ) to Table look still ReadOnly =false
True, because these Scripting checks don’t affect the Schema itself, where you do check the ReadOnly flag. It remains false all the time.
What you need to do is to ask the server for the access rights description string (once after successful login), decypher it using similar rules as in Script and then use that data in your app.
While Relativity Server exposes the SessionManagementService that allows to read or set session values, this service doesn’t provide access to Login.[name here] session values because they can contain sensible information.
But you can still expose access rights description string as a table.
To do this
1.Add a new table to the Schema (right-click the Tables one), set proper (like AccessRights) name and set its ReadOnly flag to true
2.Go to Statements and add a Statement there
3.Set Statement type to SQL
4.Set Statement text to
SELECT
"1" as description
5.Open ‘Mappings’ tab and press ‘Create/Reset’ button
6. Go back to SQL tab and change SQL to
SELECT
{description} as description
7.When prompted to update fields say 'No’
8. Go to global Scripts and update your onUnknownSqlMacroIdentifier function to handle the description macro:
function onUnknownSqlMacroIdentifier(name)
{
// Existing code goes here
if (name === 'description')
return '"' + session['Login.description'] + '"';
}
Now you can access this table from client, read its single data line and use the retrieved data to setup the interface as needed.
The User-Role Settings are working.
But i found out since there are quite some Tables to Set ( 14 ) the String is getting to long.
Since i need every entry 2 Times.
I did not find a way to say, if the User has -RW the of course he has also read Access.
Instead of TABLE1,TABLE1-RW it would be better only TABLE1-RW.
// Called during validation of request (fetching) for a data table. Should return true if access to the table should be allowed
function onValidateDataTableAccess(name, parameterNames, parameterValues, currentAllowed)
{
log('AccessRights = ' + session['Login.description'] + '');
name = name.toUpperCase();
if ('TABLE1,TABLE2,TABLE3'.split(',').indexOf(name) < 0)
return true;
return session['Login.description'].split(',').indexOf(name) >= 0;
}
function beforeProcessDelta(delta)
{
var name = delta.name.toUpperCase() + '-RW';
if (session['Login.description'].split(',').indexOf(name) < 0)
fail('You cannot update the table ' + delta.name);
}
As always great help.