Question

What is the definition of allowed in the only visible if allowed property

3

Does this property only look at the microflow access or does it also check whether the object manipulations that the underlying microflow(s) can be executed by the user based on his / her entity access ?

asked 2010-05-19

Michel Vermeer

1 answers

Herbert Vuijk · Accepted Answer · 2010-05-19

No the framework doens't look to what happen in the microflow, only to the allowed roles property.

If a user has rights to a microflow behind a invoke button, and the microflow tries to create a object while the user isn't allowed to create that one*, then it's rather a design error. You won't let decide the framework that behaviour for you.

N.b.: For the default new and delete button the framework will check the entity access.

*Microflows are default executed with 'apply entity access' to false. So when you let that property false, you will never get a error...