Case Level Permissions

There is model JSON settings for each QPR ProcessAnalyzer model. The JSON settings contain configurations and settings related to the model. The model needs to be reloaded for the changed settings to take effect.

The below defined settings are available.

Property

Description

Permissions

Permissions section specifies data security based visibility restrictions for objects within the QPR ProcessAnalyzer model. The feature is available in In-Memory core. If these settings have not been set, all the model data within is visible to all the users having GenericRead permission for the project in which the model resides. It is possible to configure additional case level permissions by using these settings. Property Description Initialization Expression language expression used to initialize calculation environment for all the other expressions within this same permissions context. This expression is evaluated within a generic context. Case Expression language expression evaluated within the context of every case one-by-one. If the evaluation results true, then the case is visible for the user. Otherwise the case, its events and case and event attributes are not visible. EventLogKey Expression language expression used to uniquely identify all the unique event logs created by case permission filters. This expression is evaluated within a generic context.

Examples of Defining Case Security Settings

Create a permission filter so that visibility of cases is limited in a way hat only users belonging to a user group whose name equals to Region case attribute value.

{
  "Permissions": {
    "Initialization": "Let(\"groupNames\", OrderByValue(CurrentUser.GroupNames))", 
    "Case": "Region.In(groupNames)",
    "EventLogKey": "StringJoin(\"_\", groupNames)"
  }
}

Create a permission filter so that every case is only visible for users whose user name equals to Account Manager case attribute value.

{
  "Permissions": {
    "Initialization": "Let(\"userName\", CurrentUser.Name)", 
    "Case": "(Attribute(\"Account Manager\") == userName)",
    "EventLogKey": "CurrentUser.Id"
  }
}