Privileges, Duties and security roles

(0) Share

Report

Posted on by Community Member

Hi Community,

I have a security related question for you guys and / or ladies.

I am currently developing in a Dynamics AX 2012R3 system and sometimes i need to update or create new privileges/duties that have been forgotten by other developers. I do not want to wait for a release moment in our production environment (mostly 8-12 weeks period).

Is it required to run a full compile or a full or incremental CIL when importing new privileges, duties or security roles in Dynamics AX?

Kind regards,

Jack

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (0)

Sohaib Cheema 49,438 User Group Leader on at

Like (1)

Report

usually incremental CIL is enough, also, you can import changes in downtime, possibly at night

Was this reply helpful? Yes No
André Arnaud de Cal... 301,130 Super User 2025 Season 2 on at

Like (1)

Report

Hi Jack,

Keep in mind that moving security using an xpo and models can have a side effect. When your deployment strategy is to move a tested model-store from a staging or acceptance environment, there might be some differences in element ID's between intermediate moved objects and the model store. This can cause the setup to be a bit crippled when the model store replaces the element ID's.

Further: Security can also possibly work without CIL compilation, but I'm not 100% sure. But incremental for sure will be correcting all intermediate changes. If you have multiple AOS machines, note that the CIL will be updated on other machines when you restart them.

Was this reply helpful? Yes No
5400 7,162 on at

Like (0)

Report

full compile - No

full CIL - No

incremental CIL - yes. If you have multiple AOS, we have to take some down time to start the other AOS. Logically, if there is no code change CIL is not required but I did not try this scenario.

Was this reply helpful? Yes No
Martin Dráb 237,967 Most Valuable Professional on at

Like (0)

Report

I can't think of any scenario when compilation would be needed, nevertheless I never thought of delivering models without compilation, so I have zero experience with it. You should rather ask Microsoft; they have the best idea about what happens internally.

In either case, compiling CIL without compiling X++ doesn't make sense, because CIL compiler depends on metadata prepared by X++ compiler. If you need CIL, you need X++ as well (it's not necessary true the other way around). And if you don't update X++, CIL compilation won't do anything.

CIL compilation creates CIL representations of AX interfaces, classes, tables and enums. Roles and privileges (etc.) are not compiled to CIL types.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you all for your answers! I know enough now :).

Was this reply helpful? Yes No
André Arnaud de Cal... 301,130 Super User 2025 Season 2 on at

Like (1)

Report

Hi Jack,

Would you mind to mark one or more answers so this thread will get the status answered? By marking verified answers you also indicate which answers helped you, so other members can quickly find their resolutions.

Was this reply helpful? Yes No