Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi All,
I was going through the default security rules related to the ODAG in QMC and I am having a hard time understanding DeleteODAGLinkUsage rule.
In document it says this rule allows users with read access to selection app to delete the ODAGLinkUsages for that app.
I did disable this rule and still I can delete the navigation link which I created from selection app.
The terminology Link Usage is not clear here about what it exactly represents.
Any help would be appreciated.
I worked on different security rule but never of on demand app.
Can you please post the default rule plus what you exactly try to achieve?
Here is the rule I am talking about:
Non-anonymous users with read access on the selection app can delete OdagLinkUsages for that app
Name | Resource Filter | Conditions | Context | Actions |
---|---|---|---|---|
DeleteOdagLinkUsage | OdagLinkUsage_* | !user.IsAnonymous() and resource.selectionApp.HasPrivilege("read") | Only in Hub | Read, Delete |
I just want to understand what it does. Because I tried to disable it and I can still delete the ODAG links.
Have you tired changing Actions to only 'Read'?
For what I see the condition says.. Users 'not equal' to Anonymous has privilege as 'Read' and in Actions it is both read and delete.
All the users which has access can Read/Delete the link.
Do you want all users not to delete the link, What are you aiming to do here?
Yes. I tried Read only Action and still I was able to delete the ODAG Navigation Link. From the description of the rule it's not clear what 'OdagLinkUsages' means.
Just disable the rule?
I can do that but just want to understand what it does.
I ran into the same issue and found out that a user is able to delete ODAG links because the user created them. When the user that is created an ODAG link attempts to delete it, the DeleteOdagLinkUsage rule doesn't control the deletion of the link. Instead the Owner rule, which says that an owner of a resource can update and delete a resource unless that resource is a published app or a published app object.
That answers the "Why can I delete the ODAG link with DeleteOdagLinkUsage rule being disabled?" question, but it doesn't answer the "What is OdagLinkUsage
resource?" question.
Has anyone figure out what an OdagLinkUsage
resource is over the last five years?