Finance | Project Operations, Human Resources, ...

Find Security Privileges linked to menu item

(2) Share

Report

Posted on by MYGz

2,188

Hi,

I can get all the menu items under System Administration module using below code.

Now I want to get the Security Privileges linked to these menu items. I'm unable to figure out how to do it.

using Microsoft.Dynamics.AX.Metadata.MetaModel;

class AOTFind
{
    public static void main(Args _args)
    {
        str rootName = "SystemAdministration";   
        AxMenu sysAdminMenu = Microsoft.Dynamics.Ax.Xpp.MetadataSupport::GetMenu(rootName);
        
        if (sysAdminMenu)
        {
            AOTFind explorer = new AOTFind();
            info(strFmt("Starting traversal of: %1", rootName));
            explorer.traverseElements(sysAdminMenu.Elements.getEnumerator());
        }
        else
        {
            error(strFmt("Menu '%1' not found in AOT.", rootName));
        }
    }

    private void traverseElements(System.Collections.IEnumerator _enumerator)
    {
        while (_enumerator.MoveNext())
        {
            AxMenuElement element = _enumerator.Current;

            if (element is AxMenuElementSubMenu)
            {
                AxMenuElementSubMenu subMenu = element as AxMenuElementSubMenu;
                info(strFmt("Folder: %1", subMenu.Name));
                
                this.traverseElements(subMenu.Elements.getEnumerator());
            }
            else if (element is AxMenuElementMenuItem)
            {
                AxMenuElementMenuItem menuItemRef = element as AxMenuElementMenuItem;
                this.processMenuItem(menuItemRef);
            }
        }
    }

    private void processMenuItem(AxMenuElementMenuItem _ref)
    {
        info(strFmt("  - Item: %1 (%2)", _ref.MenuItemName, _ref.MenuItemType));
    }

}

Appreciate any tips.

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Mohamed Amine Mahmoudi 26,434 Super User 2025 Season 2 on at

Like (0)

Report

Hi @MYGz,

You can use a simples queries to find the list of privileges for each menu item.

https://d365ffo.com/2021/09/04/ax-d365fo-x-code-to-find-all-the-privileges-for-a-menu-item-in-ax/

Best regards,

Mohamed Amine

Was this reply helpful? Yes No
MYGz 2,188 on at

Like (0)

Report

Hi @Mohamed Amine Mahmoudi

Already went through that blog and many others. But most of the blogs are written for AX 2012. The code doesn't works in D365 F&O.

Was this reply helpful? Yes No
MYGz 2,188 on at

Like (0)

Report
So, I have just drilled down to a single menu item (SysUserInfoPage) to arrive at the working code.

Although I'm able to find the MenuItem and the Security Privilege, I can't figure out how to get the SecurityPrivilege linked to the MenuItem.

Below is the update:

using Microsoft.Dynamics.AX.Metadata.MetaModel; using Microsoft.Dynamics.ApplicationPlatform.Environment; using Microsoft.Dynamics.AX.Metadata.Storage; using Microsoft.Dynamics.AX.Metadata.Storage.Runtime; using Microsoft.Dynamics.AX.Security; using Microsoft.Dynamics.AX.Security.Management.Domain; class AOTFind { public static void main(Args _args) { // Set root to the System Administration module menu str rootName = "SystemAdministration"; AxMenu sysAdminMenu = Microsoft.Dynamics.Ax.Xpp.MetadataSupport::GetMenu(rootName); if (sysAdminMenu) { AOTFind explorer = new AOTFind(); info(strFmt("Starting traversal of: %1", rootName)); // Begin recursion explorer.traverseElements(sysAdminMenu.Elements.getEnumerator()); } else { error(strFmt("Menu '%1' not found in AOT.", rootName)); } } private void traverseElements(System.Collections.IEnumerator _enumerator) { while (_enumerator.MoveNext()) { AxMenuElement element = _enumerator.Current; if (element is AxMenuElementSubMenu) { AxMenuElementSubMenu subMenu = element as AxMenuElementSubMenu; //info(strFmt("Folder: %1", subMenu.Name)); // Recurse into the sub-menu's elements this.traverseElements(subMenu.Elements.getEnumerator()); } else if (element is AxMenuElementMenuItem) { AxMenuElementMenuItem menuItemRef = element as AxMenuElementMenuItem; if(menuItemRef.MenuItemName=='SysUserInfoPage') { this.processMenuItem(menuItemRef); } } } } private void processMenuItem(AxMenuElementMenuItem _ref) { str targetMenuItem = _ref.ToString(); // Your menu item name here var securityRepository = SysSecurity::GetSecurityRepository(); var privilegesRepo = securityRepository.Privileges; var privEnumerator = privilegesRepo.LoadAll().GetEnumerator(); info(strFmt("Searching for privileges linked to: %1", targetMenuItem)); while (privEnumerator.MoveNext()) { Privilege privilege = privEnumerator.Current; if(privilege.ToString() == 'SysUserInfoMaintain') { if (AOTFind::hasMenuItemAccess(privilege, targetMenuItem)) { info(strFmt("Match Found: %1", privilege.Name)); } } } // Safe access to MenuItemName and Type info(strFmt(" - Item: %1 (%2)", _ref.MenuItemName, _ref.MenuItemType)); } private static boolean hasMenuItemAccess(Privilege _privilege, str _menuItemName) { // Check Display Menu Items var displayGrants = _privilege.DisplayMenuItemGrants.GetEnumerator(); while (displayGrants.MoveNext()) { if (displayGrants.Current.Name == _menuItemName) return true; } // Check Action Menu Items var actionGrants = _privilege.ActionMenuItemGrants.GetEnumerator(); while (actionGrants.MoveNext()) { if (actionGrants.Current.Name == _menuItemName) return true; } // Check Output Menu Items var outputGrants = _privilege.OutputMenuItemGrants.GetEnumerator(); while (outputGrants.MoveNext()) { if (outputGrants.Current.Name == _menuItemName) return true; } return false; } }

Was this reply helpful? Yes No
Suggested answer

André Arnaud de Cal... 301,109 Super User 2025 Season 2 on at

Like (1)

Report

Hi MYGz,

On each form, you can use the Security diagnostics which is showing you all related roles, duties and privileges. You can reverse engineer that logic to find out how to find the privileges per menu item.

You can find the example code on form SysSecDiagnostics > datasource SysSecSecurityObjects > method executeQuery.

Was this reply helpful? Yes No
MYGz 2,188 on at

Like (0)

Report
Found the issue, but now it's taking soo long for the Job to run..... like forever....

_ref.ToString() // change to _ref.MenuItemName;

Was this reply helpful? Yes No

Join the conversation

Community site session details

Find Security Privileges linked to menu item

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates

Community site session details

Find Security Privileges linked to menu item

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Subscribe to this forum!

Select categories

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates