Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

A little different than what has been discussed using Remedy workflow, you could also use something that looks at the URL and prevents access or rewrites the URL. mod_rewrite for Apache comes to mind. Looks like there is URL Reewrite

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Check out this configurable approach. https://docs.bmc.com/docs/ars91/en/specifying-an-actor-based-form-view-609071116.html It's not permissions, based and as mentioned on thread, you would want to control permissions at the field level. But I think this approach would accomplish what you want

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

as long as your permission model is secure then letting them into that view won't give them access to something they shouldn't have access tothen it shouldn't be an issue for them to be therebut, the method outlined before will prevent it nonetheless if that's your wish :) On Fri, Nov 17,

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Well they don’t bave access to the things they shouldn’t have to but I don’t want them to event get to those thing they don’t have access to... On Fri 17. Nov 2017 at 17:15, LJ LongWing wrote: > ** > No, it's more of a factor of 'what is in the admin view what they >

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

No, it's more of a factor of 'what is in the admin view what they shouldn't have access to'...and should you change permissions to those elements so that even if they make it into the Admin view, that they don't have access to the things they shouldn't have access to :) On Fri, Nov 17, 2017 at

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Thomas, This is my favorite topic of 'security through obscurity'.if the method that things are secured is by simply not 'showing them' to the user...or, putting them behind a curtainthen it's not truly security. I believe what Misi is saying is that by creating an AL that prevents the

Re: New Chrome versions

I'd be interested to see if you upgrade to the 63 beta, if the problem is resolved though :) On Fri, Nov 17, 2017 at 7:51 AM, Grooms, Frederick W < frederick.w.gro...@xo.com> wrote: > ** > > I did not have the issue with MT 9.1.002 and Chrome 61, only 62 > > The funny one is I have a form where

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

instead of just closing the window, you could open a new window with the 'correct view'...that would be less heavy handed :) On Fri, Nov 17, 2017 at 7:43 AM, Thomas Miskiewicz wrote: > ** > Heavy handed indeed. Thanks LJ > > On Fri 17. Nov 2017 at 15:37, LJ LongWing

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Oh yea? Please elaborate. On Fri 17. Nov 2017 at 16:46, Misi Mladoniczky wrote: > If you have to rely on GUI functionality to do this, one could argue that > your permission strategy is faulty to start with... > /Misi > > Thomas Miskiewicz skrev: (17 november

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

If you have to rely on GUI functionality to do this, one could argue that your permission strategy is faulty to start with... /Misi Thomas Miskiewicz skrev: (17 november 2017 14:42:20 CET) >Hello there, > >I have Form A with User View and Admin View. How can I prevent

Re: New Chrome versions

I did not have the issue with MT 9.1.002 and Chrome 61, only 62 The funny one is I have a form where some buttons are default visible (an AL hides them on Window Open) and with Chrome 62 they stay visible but as you cursor over them they disappear Fred From: Action Request System discussion

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Hi, You could write an AL that checks what view is being requested then log the user out. You can qualify the running of the AL based on the required criteria. -- Kind Regards, Carl Wilson From: Action Request System discussion

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Heavy handed indeed. Thanks LJ On Fri 17. Nov 2017 at 15:37, LJ LongWing wrote: > ** > Thomas, > You can create an AL that fires on Window Open with a run if of something > like > > $VUI$ = "Admin View " AND NOT ($GROUPS$ LIKE "%;1;%") > > and have the action be close

Re: New Chrome versions

https://communities.bmc.com/docs/DOC-101247 On Tue, Nov 14, 2017 at 12:12 PM, Grooms, Frederick W < frederick.w.gro...@xo.com> wrote: > Has anyone seen issues in the new Chrome version where workflow fires to > make a field Visible (or Hidden) and the screen doesn't change? > > Fred > >

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Form views don't have permissions so the only way I know to do it is to use an Active Link on Window Open where you are checking $VUI$ Fred From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Thomas Miskiewicz Sent: Friday, November 17, 2017 7:42 AM

Re: Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Thomas, You can create an AL that fires on Window Open with a run if of something like $VUI$ = "Admin View " AND NOT ($GROUPS$ LIKE "%;1;%") and have the action be close window It's a bit heavy handedbut it works On Fri, Nov 17, 2017 at 6:42 AM, Thomas Miskiewicz

Is there a state of the art way to prevent unauthorised access to Form Views in Mid Tier?

Hello there, I have Form A with User View and Admin View. How can I prevent unauthorised access to the Admin View? If there is no configurable state of the art way maybe you have an elegant idea how to achieve it? Thank you Thomas