Skip to main content


         This documentation site is for previous versions. Visit our new documentation site for current releases.      
 

Controlling access to individual cases

Updated on July 1, 2021

Ensure that only the employee, the employee’s manager, and the human resources staff can view an employee’s timesheet.

Before you begin:

Assume that these steps have already been done:

  1. A case type named Timesheet is created.
  2. In the Timesheet class, the EmployeeID property identifies the employee and the EmployeeManagerID property identifies the employee’s manager.
Do these steps to ensure that only the employee, the employee’s manager, and human resources staff can view the employee’s timesheet.
  1. In Dev Studio, create an access control policy for an Apply to class equal to Timesheet and Action equal to Read.
  2. Next to the Permit access if field, click the Open icon to create a new Access control policy condition instance.
  3. Create an access control policy condition named CanViewTimesheet to define who can view the timesheet. Enter the following values:
    1. Policy condition A = Requestor.AccessGroup = HRApp:HRStaff (the user works in human resources)
    2. Policy condition B = Requestor.OperatorID = EmployeeID (the user is looking at the user’s own timesheet)
    3. Policy condition C = Requestor.OperatorID = EmployeeManagerID (the user is the manager of the employee on the timesheet)
    4. Conditional logic = A OR B OR C
  4. On the Access control policy instance, in the Permit access if field, enter CanViewTimesheet. Only users who satisfy the condition in step 3d can view the timesheet.
    Access control policies apply not only to the application user interface, but to most Pega Platform features. For example, PropertyRead policies also apply to reports, searches, and even to custom SQL that you write.
  • Previous topic Validating user input and preventing invalid values
  • Next topic Encrypting the values of sensitive properties

Tags

Pega Platform 8.5 Security

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Visit the Support Center

Did you find this content helpful?

Yes
No

Want to help us improve this content?
Suggest an edit

We'd prefer it if you saw us at our best.

Pega.com is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us