﻿<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/"><channel><title>StrataFrame Forum » StrataFrame Application Framework - V1 » Role Based Security  » Administrator - Permission Deny</title><generator>InstantForum 2017-1 Final</generator><description>StrataFrame Forum</description><link>http://forum.strataframe.net/</link><webMaster>StrataFrame Forum</webMaster><lastBuildDate>Thu, 23 Apr 2026 00:40:55 GMT</lastBuildDate><ttl>20</ttl><item><title>Administrator - Permission Deny</title><link>http://forum.strataframe.net/FindPost31993.aspx</link><description>does the Administrator users bypass all the grants and denyes settings ?&lt;br/&gt;&lt;br/&gt;&lt;div&gt;I have an Administrator user, that doesn´t wanto to access some process... then I set the Deny to tha process (or uncheck the process in preference list).&lt;br/&gt;&lt;br/&gt;&lt;div&gt;When I test it, the programm allows the user, as it ignores the Grant or Deny ...&amp;nbsp;&lt;br/&gt;&lt;br/&gt;&lt;div&gt;Is because the users is administrator ?&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;if (&lt;span style="background-color: rgb(255, 221, 0);"&gt;SecurityBasics.CurrentUser.IsAdministrator == true&lt;/span&gt;)&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; if (&lt;span style="background-color: rgb(255, 255, 0);"&gt;SecurityBasics.CurrentUser.GetPermission("TRADER_OPERACAO").Action == PermissionAction.Deny&lt;/span&gt;) &amp;nbsp;&lt;font color="#ff0000"&gt;&amp;lt;&amp;lt; the programm ignores the status of this setting&lt;/font&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; {&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; modoOperacao = 1; //TRADER CONSULTA&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; ConfiguraBotoesUsuarioConsulta();&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; }&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; else&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; {&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; modoOperacao = 0; //TRADER&amp;nbsp;&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; }&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; else // usuario normal&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; {&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; if (SecurityBasics.CurrentUser.GetPermission("TRADER_OPERACAO").Action == PermissionAction.Grant)&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; {&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; modoOperacao = 0; //TRADER&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; }&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; else if (SecurityBasics.CurrentUser.GetPermission("TRADER_CONSULTA").Action == PermissionAction.Grant)&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; {&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; modoOperacao = 1; // CONSULTA&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; ConfiguraBotoesUsuarioConsulta();&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; }&lt;div&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; }&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;div&gt;Regards&lt;br/&gt;</description><pubDate>Tue, 23 Apr 2013 10:40:13 GMT</pubDate><dc:creator>Marcelo Blank</dc:creator></item><item><title>RE: Administrator - Permission Deny</title><link>http://forum.strataframe.net/FindPost31995.aspx</link><description>Thanks Ben,&lt;br/&gt;&lt;br/&gt;&lt;div&gt;That wath I tought ...&lt;br/&gt;&lt;br/&gt;&lt;div&gt;I´ll do it.&lt;br/&gt;&lt;br/&gt;&lt;div&gt;Regards,</description><pubDate>Tue, 23 Apr 2013 10:40:13 GMT</pubDate><dc:creator>Marcelo Blank</dc:creator></item><item><title>RE: Administrator - Permission Deny</title><link>http://forum.strataframe.net/FindPost31994.aspx</link><description>Yes, an administrator bypasses all tests on permissions and always returns Grant. &amp;nbsp;You could create a custom class and set it as the CurrentUser if you want to do some custom logic for Administrators.</description><pubDate>Tue, 23 Apr 2013 10:35:29 GMT</pubDate><dc:creator>StrataFrame Team</dc:creator></item></channel></rss>