Underlying Access Control Script

As you set the access rules, an underlying script is generated. This script is available on the Script sub-tab of the access tab. This script tab is interactive, and you can make edits directly in the script. As you work in either the access tab interface or the script tab, all changes made in one place appear in the other.

The following example screen of a Closeddirectory overview tab shows a summary of all access rules for project us-sales.

Example for Access Script

The Script sub-tab shows the Closedresultant script.

Example Script Tab

NOTE: The inherit-from-parent-folder tag cannot be used at the project root level as there is no parent folder to inherit from.

Click the Script example link to see the full script. 

access {
  file-access {
    allow-read
    allow-write {
      if-property "Function" "Analyst" "Manager" 
    }
  }
  cbase-access {
    limit-rows-by-values {
      column "Brand"
      values "ABSOLUT"
      if-property "Function" "Analyst" "Manager"
    }
    allow-all-rows
    allow-columns "Cost" {
      if-property "Function" "Manager" 
    }
    restrict-columns "Cost" "Invoice Number" "Customer ZIP" "Customer Chain"
  }
  model-access {
    limit-dimension {
      dimension "Brand"
      values "ABSOLUT"
      if-property "Function" "Analyst" "Manager"
    }
    restrict-columns "Cost"
    allow-columns "Cost" {
      if-property "Function" "Manager"
    }
  }
  audit-rules {
    audit {
      trigger "patient name"
      trigger "mrn"
      column "address"
      column "diagosis"
      if-property "Function" "Salesperson" "Support"
    }
  }
}

To reset your access control script:

  1. Use the view switcher to open the script in Text Editor.

  2. Select the entire contents of the file and press Delete.

    The ClosedReset top-level Access Control dialog box appears.

    Reset top-level Access Control dialog box

  3. Click OK.

    The access control script is reset to have just the access {} tag.

    NOTE: You may need to close and reopen the script to see the top-level tag.

For more information about working with the script syntax, see:

See also: