if
I have a role called "Administration". A permission key was created for a category called Administration (not technically related). The key is use above and it is called "SystemMaintenance". The key is given grant rights for the "Administration" role. I removed myself from that role to test. The only thing that may be gumming up the works is the fact that my profile is marked as an administrator. Does the administrator bypass any and all permission sets?
What would be nice is SecurityBasics.CurrentUser.IsInRole("Administration"). It would simply return a boolean value. It look like I have to create a dictionary list then walk the list to see if the user is in the role or not. Is that right?
Thanks for your help,Bill
SecurityBasics
Then, I have to specifically deny people access to everything they should not have access to (the taking-away-the-keys-to-the-kingdom approach). I see more why Greg suggested deny as the default (the don't-let-them-have-the-keys-at-all approach). This will take a bit of time to setup. I see why you suggest waiting until the end of the development process; however, I may have been better served to consider some of this stuff up-front.
Thanks for your help, gents!Bill