RE: About File Permission

Kenzo Tanaka — Wed, 01 Jul 2020 23:46:34 GMT

Hello Chris,

Thank you for your reply.

My post is a general question, so you can think based on the latest version of Aras.

MAC Policy and DAC Policy are very good function, but I think they does not work for File Item Type.
Does MAC Policy or DAC Policy work for File Item?
If so, I’ll check the actual behavior.

About client side, it is good idea to switch the form by user role.
Is there any way to switch the column of search grid and relation grid by user role?
Engineer and Sales staff can see the viewable_file property in the grid, but other user cannot set the property in the grid.

Thanks,

Kenzo

RE: About File Permission

Christopher Gillis — Wed, 01 Jul 2020 18:24:47 GMT

Hello,

Could you let us know what version of Aras Innovator you are using? Aras has added additional options for access control in recent releases. We have a few blog posts I'd recommend checking out including a general overview of these new options and the individual blog posts for MAC Policies and DAC Policies. There's a particular feature that was added to MAC Policies in 12.0 SP6 that I think could handle this use case quite well.

In addition to actually limiting access at a server level, it would also be beneficial to implement client-side changes to reflect this new access. Engineers should be able to see the default form for CAD, sales staff should see a more limited version of the CAD form that removes the native_file field entirely, and other users should see an even more limited view that removes both the native_file and viewable_file fields.

Chris

Christopher Gillis

Aras Labs Software Engineer