HsvSecurityAccess Object Overview

The HsvSecurityAccess object is used to get and set application security. This object provides access to security-related items such as users, roles, and security classes.

The HsvSecurityAccess object is a child of the HsvSession object. Use HsvSession’s Security property to assign HsvSecurityAccess object references as shown in the following example:

  Dim cHsvSecurityAccess As HsvSecurityAccess
  Set cHsvSecurityAccess = cHsvSession.Security

The following table lists the methods of the HsvSecurityAccess object.

Table 26. HsvSecurityAccess Object Methods

Method

Description

AddApplicationAdministrator

Deprecated - use AddApplicationAdministrator2.

AddApplicationAdministrator2

Assigns the Application Administrator role to a user.

AddOrRemoveApplicationAdministrators

Deprecated - use AddOrRemoveApplicationAdministrators2.

AddOrRemoveApplicationAdministrators2

Adds or removes one or more users from the Application Administrator role.

AddOrRemoveRolesFromUser

Deprecated - use AddOrRemoveRolesFromUser2.

AddOrRemoveRolesFromUser2

Adds or removes a user from one or more roles.

AddOrRemoveUsersFromRole

Deprecated - use AddOrRemoveUsersFromRole2.

AddOrRemoveUsersFromRole2

Assigns users to or removes them from a given role.

AddSecurityClass

Adds a security class to a Classic application.

AddSecurityClassWithAccessCode

For internal use.

AddUser

Deprecated - use AddUser2.

AddUser2

Adds a user or user group to an application.

AddUserEx

This method is not supported as of Release 4.1.

AddUserToRole

Deprecated - use AddUserToRole2.

AddUserToRole2

Assigns a user to a role.

AllowRulesLoadForEPMAApp

For internal use.

DeleteSecurityClass

Deletes a security class from a Classic application.

DeleteSecurityClassWithAccessCode

For internal use.

EnumApplicationAdministrators

Deprecated - use EnumApplicationAdministrators2.

EnumApplicationAdministrators2

Returns arrays containing the security identifiers and usernames of the users assigned to the Application Administrator role.

EnumRoles

Returns an array containing the names of an application’s roles.

EnumRolesForPrincipal

Returns the IDs of a user's or group's roles.

EnumRolesForUser

Returns the localized names of a user's roles.

EnumSecurityClasses

Returns arrays containing an application’s security class IDs and names.

EnumSecurityClassRightsForPrincipal

Returns arrays representing a user's access and email alerting rights to security classes.

EnumUserClassAccess

Returns the access and email alerting rights that the specified users have for the specified security classes.

EnumUsers

Deprecated - use EnumUsers2.

EnumUsers2

Deprecated - use EnumUsers3.

EnumUsers3

Returns arrays containing the security identifiers and usernames of an application’s users. If delegated user management is enabled in Shared Services, you can filter users who have access rights not granted to the connected user.

EnumUsersInGroup

Returns the security identifiers, usernames, and identity types of the users in a user group.

EnumUsersInRole

Deprecated - use EnumUsersInRole2.

EnumUsersInRole2

Returns the security identifiers and usernames of the users and groups assigned to a given role.

EnumUsersInRole3

Returns the security identifiers and usernames of the users and groups assigned to a given role, and optionally allows you to return this information for users of any groups assigned to the role.

EnumUsersInSecurityClass

For internal use.

EnumUsersInSecurityClass2

For internal use.

EnumUsersInSecurityClass3

For internal use.

EnumUsersOrGroups

Returns the security identifiers, usernames, and identity types of the users in a user group.

EnumUsersWithFilter

Deprecated. Use EnumUsersWithFilter2.

EnumUsersWithFilter2

Performs a filtered search that returns the security identifiers and usernames of matching users and groups. Filtering options include wildcard searching on usernames and filtering by user category. If delegated user management is enabled in Shared Services, you can filter users who have access rights not granted to the connected user.

GenerateSecurityReportForBiPub

For internal use.

GetAllSecurityClassRightsForConnectedUser

Returns arrays indicating the connected user's rights to all security classes.

GetApplicationAdministratorAccessForAllUsers

Deprecated - use GetApplicationAdministratorAccessForAllUsers2.

GetApplicationAdministratorAccessForAllUsers2

Indicates which of an application’s users are assigned to the Application Administrator role.

GetConnectedUser

Deprecated - use GetConnectedUser2.

GetConnectedUser2

Returns the security identifier and username of the connected user.

GetIdentityTypes

Returns the identity types of the specified users.

GetNumRoles

Returns a count of the number of roles in an application.

GetOwner

This method is not supported as of Release 4.1.

GetRoleAccessForAllUsers

Deprecated - use GetRoleAccessForAllUsers2.

GetRoleAccessForAllUsers2

Indicates whether the application’s users are assigned to a given role.

GetRoleID

Returns the ID of a role, given the role’s name.

GetRoleLabel

Returns the name of a role, given a role ID.

GetRulesMode

For internal use.

GetSecurityClassAccessForAllUsers

Deprecated - use GetSecurityClassAccessForAllUsers2.

GetSecurityClassAccessForAllUsers2

Returns the access rights to a security class for all of an application’s users.

GetSecurityClassID

Returns the ID of a security class, given the security class’s name.

GetSecurityClassLabel

Returns the name of a security class, given a security class ID.

GetSecurityClassRightsForConnectedUser

Indicates the access rights that the connected user has to a security class.

GetTaskAccessForConnectedUserFromList

Indicates whether the connected user is allowed to perform one or more tasks.

GetUserAccessForAllRoles

Deprecated - use GetUserAccessForAllRoles2.

GetUserAccessForAllRoles2

Indicates whether a user is assigned to the application’s roles.

GetUserAccessForAllSecurityClasses

Deprecated - use GetUserAccessForAllSecurityClasses2.

GetUserAccessForAllSecurityClasses2

Returns the level of access rights that a user has for each security class in an application.

GetUserID

Deprecated - use GetUserSID.

GetUserIDFromSID

This method is not supported as of Release 4.1.

GetUserInfoFromUniqueID

Deprecated. Use GetUserInfoFromUniqueID2.

GetUserInfoFromUniqueID2

Returns user information such as the username, first name, and last name, given the user's external authentication token and security identifier.

GetUserName

Deprecated - use GetUserName2.

GetUserName2

Returns a username, given a security identifier.

GetUserNameFromSID

Returns the username of a user, given the user’s security identifier (SID).

GetUserSID

Returns the security identifier for a given user.

InsertDefaultSecurityClass

For internal use.

InsertDefaultSecurityClassWithAccessCode

For internal use.

IsApplicationAdministrator

Indicates whether the connected user is assigned to the Application Administrator role.

IsClassicHFMApplication

Indicates whether an application is a Classic application.

IsConnectedUserAllowedToPerformTask

Indicates whether the connected user has rights to a task.

IsConnectedUserInRole

Indicates whether the connected user is assigned to a role.

IsValidWindowsUser

This method is not supported as of Release 4.1.

RemoveApplicationAdministrator

Deprecated - use RemoveApplicationAdministrator2.

RemoveApplicationAdministrator2

Removes a user from the Application Administrator role.

RemoveUser

Deprecated - use RemoveUser2.

RemoveUser2

Removes a user from an application.

RemoveUserFromRole

Deprecated - use RemoveUserFromRole2.

RemoveUserFromRole2

Removes a user from a role.

RenameSecurityClass

For internal use.

SetManySecurityClassRightsForUser

Deprecated - use SetManySecurityClassRightsForUser2.

SetManySecurityClassRightsForUser2

Sets a user’s access and email alerting rights for one or more security classes.

SetRolesForUser

Specifies one or more roles for a given user.

SetRulesMode

For internal use.

SetSecurityClassLabel

Changes the name of a security class in a Classic application.

SetSecurityClassLabelWithAccessCode

For internal use.

SetSecurityClassRightsForManyUsers

Deprecated - use SetSecurityClassRightsForManyUsers2.

SetSecurityClassRightsForManyUsers2

Sets one or more users’ access and email alerting rights to a given security class.

SetSecurityClassRightsForUser

Deprecated - use SetSecurityClassRightsForUser2.

SetSecurityClassRightsForUser2

Sets a user’s access and email alerting rights for a security class.

SetUserClassAccess

Sets security class access and email alerting rights for one or more users.

TakeOwnership

This method is not supported as of Release 4.1.

For detailed descriptions of these methods, see HsvSecurityAccess Object Methods.