IMetabasePolicy.RestrictUserDeletion

Fore Syntax

RestrictUserDeletion: Boolean;

Fore.NET Syntax

RestrictUserDeletion: System.Boolean;

Description

The RestrictUserDeletion property determines whether application administrator is prohibited to delete users who has any access permissions on repository objects.

Comments

This property is relevant to use for distributing roles between information security administrator (ISA) and application administrator (AA).

By default this property is set to False. If the value is True, the application administrator cannot delete a user who has any rights on repository objects. On attempt to delete a relevant message is displayed. To delete this user it is necessary to remove access permissions.

To change property value the user who makes setting should has a privilege "Change a security label and a list of access control of any object".

Fore Example

To execute the example, add a link to the Metabase system assembly. The mode of distributing roles between ISA and AA must be activated in the security manager.

Sub UserProc;
Var
    MB: IMetabase;
    MS: IMetabaseSecurity;
    MU: IMetabasePolicy;
Begin
    MB := MetabaseClass.Active;
    MS := MB.Security;
    MU := MS.Policy;
    MU.RestrictUserDeletion := True;
    MS.Apply;
End Sub UserProc;

After executing this example if AA tries to delete the use who has any access permissions on repository objects a relevant message is displayed.

Fore.NET Example

The mode of distributing roles between ISA and AA must be activated in the security manager. The specified procedure is an entry point for the .NET assembly.

Public Shared Sub Main(Params: StartParams);
Var
    MB: IMetabase;
    MS: IMetabaseSecurity;
    MU: IMetabasePolicy;
Begin
    MB := Params.Metabase;
    MS := MB.Security;
    MU := MS.Policy;
    MU.RestrictUserDeletion := True;
    MS.Apply();
End Sub;

After executing this example if AA tries to delete the use who has any access permissions on repository objects a relevant message is displayed.