ISecurityDescriptor.HasAccessAuditLabel

Syntax

HasAccessAuditLabel(

DesiredAccess: Integer;

Var Access: Boolean;

Var Audit: Boolean;

Parameters

Subject. Security subject, for which the availability of the permissions to the specified operations with object is checked.

DesiredAccess. Mask that determines operations, permissions for which must be checked for the Subject security subject. It is necessary to use values of the MetabaseObjectPredefinedRights enumeration type to form mask value. This enumeration contains basic and additional operations, on which permissions can be given and access auditing can be executed. The specific operations are available for defined object classes. To use specific operations depending on the object class in a mask there is a possibility to use values of the following enumerations:

CalculatedCubeSpecificRights - specific operations available for calculated cubes.
CubeLoaderSpecificRights - specific operations available for cube data loader.
CubeSpecificRights - specific operations available for various types of cubes.
CustomObjectSpecificRights - specific operations available for custom class objects.
DataBaseSpecificRights - specific operations available for the Database repository object.
DictionarySpecificRights - specific operations available for the MDM Dictionary and Composite MDM dictionary repository objects.
MDCalcSpecificRights - specific operations available for the Multidimensional Calculation on DB Server repository object.
ProblemSpecificRights - specific operations available for the Modeling Problem modeling container object.
ProcedureSpecificRights - specific operations available for the Procedure repository object.
ScenarioDimensionSpecificRights - specific operations available for the Modeling Scenario repository object.
TableSpecificRights - specific operations available for the following repository objects: Table, View, Log, External Table.
ValidationSpecificRights - specific operations available for the Validation Rule and Validation Group repository object.

Access. The variable that determines whether there are permissions to execute the specified operations with the object. The variable is set to True if the security subject has permissions to execute all the specified operations with the object.

Audit. The variable that determines whether the specified operations for the Subject security subject are audited. The variable is set to True if the specified security subject is audited at least by one of the specified operations.

Label. The variable, to which security label parameters are placed. Security label is calculated if the mandatory access to objects is enabled.

Description

The HasAccessAudit method checks and returns whether the user has permissions to execute the specified operations and whether the specified operations with object are audited and also calculates parameters of the security label that is used when printing and exporting repository objects.

Example

Executing the example requires that the repository contains an object with the Obj_1 identifier. There is the TestUser user among the security subjects that were created in the security manager of the current repository.

    Sub UserProc;
    Var
        MB: IMetabase;
        MDesc: IMetabaseObjectDescriptor;
        SecDesc: ISecurityDescriptor;
        Subj: ISecuritySubject;
        b, b1: Boolean;
        Lab: ISecurityDocumentLabel;
    Begin
        MB := MetabaseClass.Active;
        Subj := MB.Security.ResolveName("TestUser");
        MDesc := MB.ItemById("Obj_1");
        SecDesc := MDesc.SecurityDescriptor;
        SecDesc.HasAccessAuditLabel(Subj,
            MetabaseObjectPredefinedRights.Access Or
            MetabaseObjectPredefinedRights.Delete, b, b1, Lab);
        If Lab.IsON Then
            Debug.WriteLine(Lab.Label);
            Debug.WriteLine(Lab.LabelDescription);
            Debug.WriteLine(Lab.TreatSectionAsDocument);
            Debug.WriteLine(Lab.User.Name);
        End If;
    End Sub UserProc;

After executing the example the "b" variables determine whether the user has permissions to change permissions and remove the object, and the "b1" variable determines whether one of these operations is audited. The check is made for the Obj_1 repository object relative to the TestUser user. If the mandatory access control was enabled in the repository and the level, for which the marking of objects is provided when exporting and printing, was specified to the object, the Lab variable would contain parameters of the security label used for marking. These parameters are displayed in the development environment console.