[DevExpress Support Team: CLONED FROM T559861: Security permissions processing mechanism optimization and important changes in XAF v17.2]
Looks promising - will parent/child roles then be supported by the permissionpolicyrole?
We have closed this ticket because another page addresses its subject:
Allow/Deny and Role hierarchyWhen will parent/child roles be supported by the PermissionPolicyRole
Answers approved by DevExpress Support
Hello,
We intentionally removed the role hierarchy as with the new Allow/Deny permission policy such a hierarchy doesn't provide a lot of benefits. Currently (with PermissionPolicyRole), you can set the policy to AllowAllByDefault and deny access to specific objects. We have a solution that shows how to get the role hierarchy with PermissionPolicyRole: T545366: Allow/Deny and Role hierarchy, but as mentioned in this thread we didn't check this solution in all scenarios and you need to thoroughly test it before using.
For now we don't have plans to return the role hierarchy back, but we would also highly appreciate it if you share with us the case where the new "Allow/Deny" policy is not flexible enough.
Thanks,
Andrey
Other Answers
@Martin; i just saw your question and wanted to point out to T545366. This solution is currently being incorporated by us.