XAF - Release of Security System API for EF Core, Action Permissions, New Documentation, Videos, Survey (v20.1.6)

XAF Team Blog
22 July 2020

Official Release: Security System for Entity Framework Core 

We officially released Security System for EF Core 3.1 in our most recent build (v20.1.6). In addition to basic CRUD Console and WinForms examples, we added the following training videos:

These tutorials include a quick review of the Security System’s API/architecture and also describe integration steps. Remember, XAF’s Security System can be used by DevExpress and non-DevExpress customers – so please do spread the word. 

For more information on XAF’s User Authentication and Group Authorization APIs for .NET Core and .NET Framework, please refer to these Frequently Asked Questions and our landing page.


 

Official Release: Security Permissions for Actions 

v20.1.6 also includes the official release of Action Permissions. These permissions offer fine-grain control over execution of both custom and XAF system Actions within an app’s UI. This maintenance update also supports Action permissions for our ASP.NET Core Blazor UI. You can see it live in our online demo (Roles -> Users -> Denied Actions).

Video Overview | Documentation

Survey: Do You Want To Set Permission States Automatically? 

When a user creates new permissions for XAF's Security System role, permission states ('read', 'write'...) are empty by default. Some may find it helpful to set these states based on the role's PermissionPolicy property automatically. For example, if PermissionPolicy='DenyAllByDefault', you may want to set the newly created permissions to 'Allow'. If PermissionPolicy='AllowAllByDefault', you may want to set its state to 'Deny'.

To achieve this, we created a custom Controller that sets states for all newly generated Type and Navigation permissions:

This controller works with ASP.NET and WinForms XAF applications as well. We would appreciate your feedback on this feature.

Documentation and Usability Enhancements

Showcase Your Apps on DevExpress.com

Highlight your business app and share your development experiences with the DevExpress community. To include your app in our upcoming App Showcase, please forward an application screenshot to clientservices@devexpress.com and tell us which DevExpress products you currently use within your organization.
5 comment(s)
Rick Mathers
Rick Mathers
What I would like to see in the future is some sort of SaaS implementation.  I find my self writing more applications using this structure than I do individual apps installed at a client facility. That is literally the only thing holding me back.  If you have any tips or tricks to work around this, I am all ears.  
23 July 2020
Dennis (DevExpress)
Dennis (DevExpress)
@Rick Mathers: If I understand you correctly, you want XAF to support SaaS scenarios. Would you please elaborate on your current SaaS solution (application kind and most important requirements such as supported user load and deployment configurations)? What are the main challenges while creating your current SaaS solutions? We'll be more than happy to learn more and see how we can help.
24 July 2020
Rick Mathers
Rick Mathers

@Dennis, do you mind if I email you all the information?

27 July 2020
Dennis (DevExpress)
Dennis (DevExpress)
@Rick Mathers: Yes, please.
27 July 2020
Randy Jean
Randy Jean
Love the addition of Action permissions.
3 August 2020

Please login or register to post comments.