Security in General

The user sees only menu items for which he has access permission. Access permissions are managed in XSecUserRights, where read, write or no permission is defined.
  • 0 = No Access
  • 1 = Read Only
  • 2 = Write Permission  

XSecUserRightsSpecial defines special rights for user groups in specific workflow status.
0 = the group has no permission.
Everything over 0 = user ofthe specified group has access permission.

Note:
Entities which do not use workflows but need special permissions, should use the status 0.

 

Menu and Access Permission
 
Access permission is given on modules. Each sub menu item is linked to a module. That means if a user has no access to a module, the menu item wont show.
MenuSubMenu table:
  • ModuleClassName: The class name, which is instantiated in the module, e.g. FiAccountModule
  • ModuleName: Simply use the name of the project/assembly, eg. FiAccount. It's defined in the Settings file of the module.
All menu related functions can be found in the AccessPermissions class.
Users & User Groups
 
The following tables are used for user and user group management:
Users are managed in the XSecUser table
  • Users are managed in the table XSecUser
  • User Groups are managed in the table XSecUserGroup. The System Administrator group has the UserGroupID 1.
  • In order to have full access to all modules and functionalities you have to add your user to the System Administrator group. Open the XSecUser table and add your current Login Name in the UserID field.
  • The UserID has the format Domain\UserName, e.g. your network domain name is “MyDomain” and your user name is “ITManager”, then the UserID must be “MyDomain\ITManager”. 
Note: The user name is case sensitive.