Skip to content

[auto-access] ISSUE-53408 Automatic Roles Persistence

Automatic Roles should not create new entries automatically in the following tables.

== Affected tables ==

  • AD_Role_OrgAccess
  • AD_Window_Access, AD_Tab_Access, AD_Field_Access
  • AD_Process_Access ( Report And Process Access )
  • OBUIAPP_Process_Access ( Process Access )
  • AD_Form_Access
  • OBKMO_Widget_Class_Access
  • OBC2_User_Action_Access ( Defined in Core2 )
  • AD_Role_Inheritance
  • Obuiapp_view_role_access - ( View Implementation )

== Changes summary ==

  • Triggers have been updated to no longer generated records automatically in *_access tables for automatic roles: AD_FORM_TRG, AD_ORG_TRG, AD_PROCESS_TRG, AD_WINDOW_TRG, AD_PROCESS_TRG, AD_ROLE_TRG, OBUIAPP_AD_ROLE_TRG, OBUIAPP_PROCESS_TRG, OBUIAPP_VIEW_IMPL_INSERT_TRG, OBKMO_WIDGET_CLASS_TRG
  • Removes RoleEventHandler, that used to populate some *_access tables
  • Removes unneeded extension points
  • AD_UPDATE_ACCESS no longer generates entries for automatic roles
  • Removes *_access entries from sampledata that belong to automatic roles
  • Removes tests that checked the automatic generation of *_access entries
  • WindowSettingsActionHandler is updated to properly calculate disabled tabs and fields for automatic roles
  • MenuManager is updated to take into account that automatic roles do not need explicit access, taking into account user level in the relevant tables.
  • OBContext is updated to get properly the list of organization available for automatic roles, and calculates properly the default organization for default roles

== Related MRs ==

The following MRs are required to adapt to the new behaviour of automatic roles with no entries in _access tables

The following sampledata modules will be adapted to either remove _access entries for automatic roles or to update sample data to the new behavior:

Edited by Augusto Mauch

Merge request reports