Controlling user access by assigning permissions to menu elements


An application Shell is a built-in landing page and default menu system configured for every application. You can control the access to the application Shell menu elements of view components by assigning appropriate permissions to elements in the application Shell.

This capability provides the following benefits:

  • Controls access to certain application Shell menu elementsEnd-users who have appropriate permissions can view and access the application's Shell menu elements.
  • Protects against unauthorized access or activity through menu elements during application runtime

You can assign permissions to the application Shell menu elements, such as menu groups and menu items, while customizing the applications in BMC Helix Innovation Studio. 

For example, if you assign permissions to the Administrator group for an application Shell menu element, only those users belonging to the Administrator group, such as IT Helpdesk Administrators, can see and access the Shell menu element. Users who are not a part of the Administrator group, such as IT helpdesk agents, cannot access the application Shell menu element.

The following image provides additional information about assigning access permissions to application Shell menu elements:

22_1_permissions_view_components.png

Important

If permissions are not assigned for a Shell menu element, by default, BMC Helix Innovation Studio assigns public permissions to that menu element. All end-users, regardless of their user role or group, can see and access the menu element.

To assign permissions to Shell menu elements

  1. Log in to BMC Helix Innovation Studio and navigate to the Workspace tab.
  2. Select the application that you want to modify.
    The application details are displayed.
  3. From the application, click Navigation.The Application shell is displayed.
  4. From the Shell Navigation section, select the Shell menu element for which you want to control access.

    You can select any one of the following Shell menu element:

    Shell menu element

    Description

    Example

    Menu 

    Combines one or more menu items into a group. You can add the menu to the navigation bar and add menu items in the menu.

    The following image shows an example of a menu:

    221_Menu group example (1).png

    Menu item

    Launches an action in a navigation bar, such as navigating to a view, navigating to a state, or launching a URL.

    The following image shows menu items within the About menu group:

    221_Menu item example (1).png

    Action

    Launches an action in a navigation bar, such as navigating to a view, navigating to a state, or launching a URL.

    The following image shows an example of an action icon:

    221_Action icon example (1).png

  5. From the Settings tab of the Properties pane, click Edit beside Permissions as shown in the following image:22_1_BMC modern shell pallete.png
  6. In the Edit Permissions dialog box, specify the user permissions by providing the following information:

    Field

    Description

    Type

    Specify whether you want to assign permissions to a user group or user role. A user can access the Shell menu element if a group the user is in has access, or a role mapped to such a group has access. You can provide permissions for any of the following user profiles:

    • Group: Provides access to user groups based on a common profile.
      For example, assigning permission to Administrator user group.
    • Role: Provides access to user roles for specific applications. Application roles are permissions similar to groups, except that they belong to a particular application instead of a particular server.
      Application roles are used exclusively in deployable applications. For more information, see Creating-and-modifying-application-roles.

    Role/Group

    Select the user group or user role to which you want to assign access permissions.
    Only those users who belong to the selected group or role can view and access the Shell menu elements.

    The following image shows the Edit Permissions dialog box for Administration menu group:
    221_Shell menu edit permissions.png

  7. Click Save to save the changes made for the application. The permissions are assigned to the Shell menu elements. 

When end-users access the deployed application, those who belong to the Administrator user group, such as IT helpdesk administrators can view and access the Administration menu element as shown in the following image:

22_1_permissions-view component_authorized access.PNG

End-users who do not belong to the Administrator user group, such as IT helpdesk agents cannot see the Administration menu element. These end-users can see other elements as shown in the following image:

22_1_permissions-view component_unauthorized access.PNG


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*