We are trying to give rights to users to see fields that are hidden from view in the SysSetupForm that are restricted to in view to anyone who gets a true response from the SecurityRights.isDeveloper() method. Is there a developer role that is not also a SysAdmin? I looked through the list of roles and didn't see one.
Can anyone point me in the right direction?
Thanks,
Brandt
*This post is locked for comments
Hi Brandt,
I'm assuming you are referring to e.g. the fields Configuration Keys, System Name and Query tab? Personally I think these controls gives you good information for functional design purposes. Even if you are not the System administrator, sometimes you would like to see these fields.
If you look at the controls, they are treated differently, but all could be made available to users.
The Configuration Keys control has the property NeededPermission set to Manual. This means that you will need to add the form control as permission in a privilege or role. The permission used for this form is ClientEssentials. You can read this blog how to add the form control into a role for a similar issue: www.kaya-consulting.com/.../how-to-enable-record-templates-for-non-system-administrators-in-ax-2012
Another option is to change the NeededPermission value to None. Then save the changed form in the AOT.
The System Name control is different. In the init method of the form it will be determined if you are a developer or not. If this results true, the control is visible. If it returns false, it will be hidden. You can ensure the variable showDevInfo will always have the value true. If you need to give access to some users, this is a bit too rigourous.
The Query tab has two reasons: X++ code and the NeededPermission property. How to handle the NeededPermission has been explained above. The x++ logic looks also for the variable showDevInfo. So if this results true it will work.
When you change the form and permissions, the normal user can also see the values. There will be no error messages, it just works!
Developer should always have Admin rights in DEV environment
So I feel this customization is unnecessary and overhead.
I suggest not to go for it.
It's like martin says. We have the same problem here, but there is no way to do this.
No, it's not possible. Even if it was, you would grant much more rights than just seeing few fields. Permissions to change code is the most obvious example.
Do it differently - modify the SysSetupForm not to require developer rights for those controls.
#1
André Arnaud de Cal...
292,773
Super User 2025 Season 1
#2
Martin Dráb
231,655
Most Valuable Professional
#3
nmaenpaa
101,156
Moderator
Share
Report
All responses (
Answers (