Skip to main content
10-Marble
September 29, 2022
Solved

How to add Mashup viewing permissions to Users with no ComposerUsers rights

  • September 29, 2022
  • 1 reply
  • 1318 views

Hi everyone, 

 

This topic has been discussed before, but we still haven't seen a good solution. When we remove the Users (group) from the composerUsers group, all the Users other than our administrator users no longer have rights within our application. When we follow the case CS341872 then we must assign the rights separately for each Mashup,  Can this be done in an easier way? or through a global solution? Other question:  will there be a secure by design solution in a next release, so that this is no longer necessary.

 

Best regards,

Emiel

Best answer by EM_10066743

Thanks for your reply,

I had to use Mashups["Mashup"].AddDesignTimePermission to give permission for all Mashups.

And many services required me to give permission, especially InfotableFunstions and Currentsession.
Also give permission to theme styles and so on.

What is strange is that when I give design rights to the service SetCurrentUserLangueage (can be found under CurrentSession) the rights for Composer are partly returned to the user.

We still need to test the entire application regression to see if everything still functions correctly now.

It remains strange that it is not Secure by design from the basics and we have to convert everything like that.

 

Best regards,

Emiel

1 reply

22-Sapphire I
September 29, 2022

You can just do it based on collection permissions mostly.

There are a few that need some specific permissions, like the

GetAllStyleDefinitions etc.

 

But you can give collection to anything Mashup/Master in general as well as you'll need design time read on datashapes most likely.

EM_1006674310-MarbleAuthorAnswer
10-Marble
September 30, 2022

Thanks for your reply,

I had to use Mashups["Mashup"].AddDesignTimePermission to give permission for all Mashups.

And many services required me to give permission, especially InfotableFunstions and Currentsession.
Also give permission to theme styles and so on.

What is strange is that when I give design rights to the service SetCurrentUserLangueage (can be found under CurrentSession) the rights for Composer are partly returned to the user.

We still need to test the entire application regression to see if everything still functions correctly now.

It remains strange that it is not Secure by design from the basics and we have to convert everything like that.

 

Best regards,

Emiel