Siebel Security Guide > Configuring Access Control >

Configuring Access to Business Components from Scripting Interfaces

Siebel CRM provides object interface methods that can be used on Siebel business components to make their data and functions available to custom code, for example, to code that is written using Siebel scripting interfaces such as Browser Script. This topic describes how to control the operations that can be performed on business components from the Siebel scripting interfaces.

The following parameters allow you to configure the operations that can be performed on business components from scripting interfaces:

• The Siebel Server parameter, BusCompAccessLevel, can be specified for all business components to configure the operations that can be performed directly on a business component from scripting interfaces.
• The business component user property, DirectUIAccess, allows you to enable or disable operations on a specific business component from the scripting interfaces. The value of the DirectUIAccess property specified for a business component overrides any value set for business components using the BusCompAccessLevel server parameter.

  Depending on the value you configure for the DirectUIAccess parameter, you can also set a value for the DirectUIAccessFieldList business component user property; this allows you to enable write operations on specified business component fields through client-side scripting.

The following procedures describe how to set values for the BusCompAccessLevel server parameter and for the DirectUIAccess and DirectUIAccessFieldList user properties.

Configuring the Scripting Operations Permitted on Business Components (Siebel Server Parameter)

To configure the operations that can be performed on business components from scripting interfaces, specify a value for the Siebel Server parameter BusCompAccessLevel as described in the following procedure.

To configure the scripting operations permitted on business components (Siebel Server parameter)

1. Navigate to the Administration - Server Configuration screen, then the Servers view.
2. In the Siebel Servers list, select a Siebel Server.
3. Click the Components view tab.
4. In the Components list, select a Siebel Server component.
5. Select the Parameters view tab below the Components list.
6. In the Component Parameters list, locate the BusCompAccessLevel parameter.
7. Specify one of the values shown in the following table to configure access to the component from the scripting interfaces.

   Value	Description
   None	Do not allow any direct operations on the business component from scripting interfaces.
   Readonly (Default value)	Allow read-only operations on the business component from scripting interfaces.
   All	Allow all operations on the business component from scripting interfaces.

Configuring the Scripting Operations Permitted on Business Components (Business Component User Property)

To configure the operations that can be performed on a specific business component from scripting interfaces, specify a value for the DirectUIAccess business component user property as described in the following procedure.

To configure the scripting operations permitted on a business component (business component user property)

1. Start Siebel Tools.
2. In the Object Explorer, click Business Component.
3. In the Business Components list, locate the business component for which you want to configure access.
4. In the Object Explorer, expand the Business Component tree, then click Business Component User Prop.
5. In the Business Component User Props list, locate the DirectUIAccess user property, and set the property to one of the values shown in the following table.

   Value	Description
   None	Do not allow any direct operations on the business component from scripting interfaces.
   Readonly (Default value)	Allow read-only operations on the business component from scripting interfaces.
   Limitedwrite	Allow limited field-write operations on the business component from scripting interfaces. If you set the value of the DirectUIAccess parameter to Limitedwrite, you also have to set a value for the business component user property DirectUIAccessFieldList (see Step 6). If the DirectUIAccess property is set to Limitedwrite but a value is not specified for the DirectUIAccessFieldList property, this is equivalent to setting DirectUIAccess to Readonly.
   All	Allow all operations on the business component from scripting interfaces.

6. If you set the value of the DirectUIAccess parameter to Limitedwrite, you also have to set a value for the business component user property DirectUIAccessFieldList to specify the fields that can be updated through browser scripting.

   In the Value field of the DirectUIAccessFieldList user property, specify a comma-separated list of fields that can be updated through client side scripting. For example:

   Field1,Field2,Fieldn

   where Field1,Field2,Fieldn are the names of the fields for which write operations can be performed.

7. Compile and test your changes.

   For more information on setting user properties, see Using Siebel Tools.