Ticket T694717
Visible to All Users

XAF Security: Access Objects in Non-XAF Application using integrated security from XAF

created 6 years ago

Is it possible to use the integrated security from XAF together with a non-xaf application?

Meaning only one database is being used for two applications (one being a xaf application and the other a non-xaf application).
Best case: This database has already been created from the XAF application and now I want to use those security settings for the non-xaf application.
If I have a form or something else on the non-xaf application I want to know which users can write/read/etc. and link different permissions/roles to different objects.

I want to know how to best attack this problem. An example would be really helpful. Thank you.

Answers approved by DevExpress Support

created 6 years ago

Hello,

Please refer to the How to: Use the Integrated Mode of the Security System in Non-XAF Applications article to learn how to accomplish this task. Let us know if you have any further questions.

Thanks,
Andrey

    Show previous comments (3)
    DevExpress Support Team 6 years ago

      I'm afraid I still don't understand what you mean by "save new security information about an Object via Objectspace.CreateObject<>()". Do you have any difficulty using object space methods in your non-XAF application? What "other option to use the security system for non-XAF applications" are you looking for? We already described the recommended approach in the How to: Use the Integrated Mode of the Security System in Non-XAF Applications article. If you need something different, please describe your scenario and requirements in greater detail.

        Hello again :D

        So again, thanks for your time.

        Now after review me and my team decided something. Reading Permissions in non-XAF works fine.
        But what we don't want is to write manually to the XAF-Database in which the security settings (PermissionPolicyRole, PermissionPolicyUser, etc.) are saved.
        What we want to do instead is to access the Target Type in Type Permissions in the XAF application (I attached a screenshot).
        They told me that if we can trick the system to also add businessobjects from the non-XAF app to this Target Type List then everything else should work automatically because it treats the Object as the others (like Role and User for example) .
        We think then it will save all settings like Role Permissions etc. for this object like it does for the Role and User Objects.
        My question now is: Is it possible to add own Type properties to this in a non-XAF app and then choose those Properties in the XAF-Security application?

        I've already read this: https://documentation.devexpress.com/eXpressAppFramework/113579/Concepts/Business-Model-Design/Data-Types-Supported-by-built-in-Editors/Type-Properties

        But to me it seems like this is only achievable in the same application where you're gonna start the Dialog with the combo box controller.

        Thanks already,
        Best regards
        Christian

        DevExpress Support Team 6 years ago

          Hello, Christian.

          I've created a separate ticket on your behalf (T698122: Add business objects from the non-XAF app to the TargetType List of the type permission object). It has been placed in our processing queue and will be answered shortly.

          Disclaimer: The information provided on DevExpress.com and affiliated web properties (including the DevExpress Support Center) is provided "as is" without warranty of any kind. Developer Express Inc disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.

          Confidential Information: Developer Express Inc does not wish to receive, will not act to procure, nor will it solicit, confidential or proprietary materials and information from you through the DevExpress Support Center or its web properties. Any and all materials or information divulged during chats, email communications, online discussions, Support Center tickets, or made available to Developer Express Inc in any manner will be deemed NOT to be confidential by Developer Express Inc. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.