Versions Compared

Old Version 3

changes.mady.by.user Former user

Saved on

compared with

New Version 4

changes.mady.by.user Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The permission API exposes a number of methods to analyze the access rights of a given sueruser. These methods assist extension developers to secure their resources. The ES extension model supports the following permission API'sAPIs:

Table of Contents

Methods nameDescriptionExample
hasAssetPermission
This method is used to check specific asset type permissions.
  • hasAssetPermission(‘ASSET_CREATE’,’gadget’,session);
  • hasAssetPermission(‘ASSET_CREATE’,’gadget’,tenantId,username);
Info

By default hasAssetPermission method is executed taking into account the currently logged in users session
and tenantId. If you wish to check the asset type permission of another user, you need to define the tenantId and username of the specific user.

hasAppPermission

This method is used to check permissions which are independent of the asset type.

Example:

Verify if you have permission to access the My Items page.

  • hasAppPermission(‘APP_MYITEMS’,session);
  • hasAppPermission(‘APP_MYITEMS’,tenantId,username);
Info

By default hasAppPermission method is executed taking into account the currently logged in users session
and tenantId. If you wish to check the permission for independent asset types of another user, you need to
define the tenantId and username of the specific user.

hasAssetPagePermission
This method is used to check the access permissions of a user for an asset specific page.hasAssetPagePermission(‘gadget’,‘list’,tenantId,username);
hasAssetAPIPermission
This method is used to check access permissions of a user for an application specific page.hasAssetAPIPermission(‘gadget’,‘assets’,tenantId,username);
hasAppAPIPermission
This method is used to check access permissions of a user for an asset specific API.hasAppAPIPermission(‘asset’,tenantId,username);