0

Dear fellow Mendix developers,   I would like to ask you a question on how you approach a specific situation.   Imagine a scenario where you have four main entities: - Expense - Company - Employee - UserAccount   Associations between those entities: Company 1 - * Expense Company 1 - * Employee Employee 1 - * Expense Employee 1 - 1 UserAccount   We currently have only one user role: 'Employee'. They can create, delete, read and write only their own expenses. We need to add an additional role called 'Administrator'. That role has full access to the expenses of all employees that are associated to their company.   Do you: A) Create a User Role 'Administrator' and define entity access through that user role with a constraint that looks something like: [Expense/Expense_Company/Company/Company_Employee/Employee_UserAccount = '[%CurrentUser%]']   B) Create additional association between Employee and Company called 'Employee_Administrator', and then define access through constraint that looks something like:  [Expense/Expense_Company/Company/Company_Administrator/Employee/Employee_UserAccount = '[%CurrentUser%]']   When do you use A) and when do you use B)? What are pros and cons of each approach?   Edit: How does the approach change if one Employee can be administrator in multiple companies?

asked 2025-01-23

1 answers