Finance | Project Operations, Human Resources, ...

Disable XDS policy

(1) Share

Report

Posted on by AbdullahAhmed_

513

I created a security policy and I want the admin to run a batch that can disable it...

[SysOperationJournaledParametersAttribute(true)]
final class DYNADDVDisableBatch extends SysOperationServiceController
{
    public ClassDescription defaultCaption()
    {
        return "Disable Data Validation";
    }

    public void new()
    {
        super(classStr(DYNADataValidationClass),methodStr(DYNADataValidationClass,disableXDS),SysOperationExecutionMode::Synchronous);
    }

    public static DYNADDVDisableBatch construct(SysOperationExecutionMode _executionMode = SysOperationExecutionMode::Synchronous)
    {
        DYNADDVDisableBatch controller = new DYNADDVDisableBatch();
        controller.parmExecutionMode(_executionMode);
        return controller;
    }

    public static void main(Args _args)
    {
        DYNADDVDisableBatch controller = DYNADDVDisableBatch::construct();
        controller.parmArgs(_args);
        controller.startOperation();
    }

}

and this is disableXDS method code:

public void disableXDS()
    {
        unchecked(Uncheck::XDS)
        {

        }
    }

what's missing?!

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

André Arnaud de Cal... 303,716 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi,

Can you elaborate on the business requirement? Enabling or disabling a policy can be done by the model ownder in Visual Studio. There are two options where non-admin users can bypass XDS policies. I wrote 2 blogs about that:

How to bypass table security in X++ coding - Dynamicspedia

What is the purpose of the two new XDS security roles? - Dynamicspedia

In case you expect that all XDS policies are disabled by using the statement unchecked, then this is not working. The policies used when executing coding within the unchecked block will be bypassed. This unchecked statement is not a generic switch.

Was this reply helpful? Yes No
AbdullahAhmed_ 513 on at

Like (0)

Report
Copy link

Link copied!

So, what you mean is... The policy used in the Unchecked will be bypassed.. I have a policy that restrict access to all sales orders and I want the admin to turn it off across the whole system.

So, I would use for example the salesTable in the Unchecked and It should work fine?

Was this reply helpful? Yes No
André Arnaud de Cal... 303,716 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi Abdullah,

No, this will not work. It will only disable coding in the block. If a user opens the sales orders, it is not part of the unchecked block and the policy remains active. Can you tell me if the policy is your customization or part of an ISV solution? If it is a customization, can you share some details of the policy and the related query linked to the policy?

Was this reply helpful? Yes No