private void DefSecurity1()
{
//--- Menjalankan program ini harus terlebih dahulu menjalankan program pada point 1 -----
UserAccessRole adminEmployeeRole = ObjectSpace.FindObject<UserAccessRole>(new BinaryOperator("Name", SecurityStrategy.AdministratorRoleName));
if (adminEmployeeRole == null)
{
adminEmployeeRole = ObjectSpace.CreateObject<UserAccessRole>();
adminEmployeeRole.Name = SecurityStrategy.AdministratorRoleName;
adminEmployeeRole.IsAdministrative = true;
adminEmployeeRole.Save();
}
UserAccess adminEmployee = ObjectSpace.FindObject<UserAccess>(
new BinaryOperator("UserName", "admin"));
if (adminEmployee == null)
{
adminEmployee = ObjectSpace.CreateObject<UserAccess>();
adminEmployee.UserName = "******";
adminEmployee.SetPassword("skadmin@2019");
adminEmployee.UserAccessRoles.Add(adminEmployeeRole);
}
UserAccess adminEmployee1 = ObjectSpace.FindObject<UserAccess>(
new BinaryOperator("UserName", "admin1"));
if (adminEmployee1 == null)
{
adminEmployee1 = ObjectSpace.CreateObject<UserAccess>();
adminEmployee1.UserName = "******";
adminEmployee1.SetPassword("skadmin@2019");
adminEmployee1.UserAccessRoles.Add(adminEmployeeRole);
}
ObjectSpace.CommitChanges();
}
private void CreateDefaultRole()
{
UserAccessRole defaultRole = ObjectSpace.FindObject<UserAccessRole>(new BinaryOperator("Name", "Default"));
if (defaultRole == null)
{
defaultRole = ObjectSpace.CreateObject<UserAccessRole>();
defaultRole.Name = "Default";
defaultRole.AddObjectPermission<UserAccessRole>(SecurityOperations.Read, "[Oid] = CurrentUserId()", SecurityPermissionState.Allow);
defaultRole.AddNavigationPermission(@"Application/NavigationItems/Items/Default/Items/MyDetails", SecurityPermissionState.Allow);
defaultRole.AddMemberPermission<UserAccessRole>(SecurityOperations.Write, "ChangePasswordOnFirstLogon", "[Oid] = CurrentUserId()", SecurityPermissionState.Allow);
defaultRole.AddMemberPermission<UserAccessRole>(SecurityOperations.Write, "StoredPassword", "[Oid] = CurrentUserId()", SecurityPermissionState.Allow);
defaultRole.AddTypePermissionsRecursively<UserAccessRole>(SecurityOperations.Read, SecurityPermissionState.Deny);
defaultRole.AddTypePermissionsRecursively<ModelDifference>(SecurityOperations.ReadWriteAccess, SecurityPermissionState.Allow);
defaultRole.AddTypePermissionsRecursively<ModelDifferenceAspect>(SecurityOperations.ReadWriteAccess, SecurityPermissionState.Allow);
defaultRole.AddTypePermissionsRecursively<ModelDifference>(SecurityOperations.Create, SecurityPermissionState.Allow);
defaultRole.AddTypePermissionsRecursively<ModelDifferenceAspect>(SecurityOperations.Create, SecurityPermissionState.Allow);
}
ObjectSpace.CommitChanges();
}
