Validate End User Permissions in the Application

Restricting access to screens, processes, and actions

To restrict access to a screen of an app, in the Roles property of the screen select the end user Roles that can view the screen.

To restrict access to screen elements or actions of a screen, use the Check<Role_name>Role action or function to determine if the end user has the necessary Role.

Restricting access to data

You can also restrict access to data based on the user ID or the user Role.

In this next example, GetUserId() was used so that account owners can only see the opportunities of their own accounts:

To restrict the displayed data by Role, use Check<Role_name>Role in an expression on an aggregate filter.

In this next example, we're checking for the OrderManagerRole to restrict visibility over inactive opportunities. When the Check<Role_name>Role evaluates to false, only active opportunities are shown:

In Traditional Web

If you only need to check for a Role once in a screen, you can use a Check<Role_name>Role function directly in the Condition of an If widget.

If you need to check for the same Role more than once in the same screen, follow these steps:

1. In the Preparation of the screen, add the Check<Role_name>Role action, and set the UserId to GetUserId().

   

2. Use the Check<Role_name>Role.HasRole output, to hide interface elements and restrict access to actions, for example:

   • Hide or display interface elements using an If widget with a Check<Role_name>Role.HasRole Condition.

     

   • Block or allow executing actions by hiding the Buttons or Links that call the actions, using an If widget with a Check<Role_name>Role.HasRole Condition.