In our Simplifier instance, we are wondering how to configure app-viewing permissions. I hope someone can help.
When a new app is created using the current Login Wizard, a role “SF_Login” is assigned to the respective app. This role is visible within Workbench –> Other –> Security.
When we assign a user the regular app role for this app, all apps created in this way within the Simplifier instance are visable to the user, when he is in Launchpad.
We want to achieve a setup where the respective user can only see the role for which they have the explicit app role. I have also summarized this issue with a screenshot that is uploaded with this post.
since we’ve already discussed the topic in today’s call, I’ll only summarize the outcomes shortly so they can be looked up again later:
The visibility of an application for an end user in the Launchpad or Mobile Client is determined by two factors:
1. The user needs to have the execute permission for the application in question assigned to them either via global role or business role within the scope of a project.
2. Additionally, every application that allows anonymous usage as configured in the security settings of the App Designer, will be visible to the users.
As you’re executing the Login App Wizard in newly created applications, all such apps are going to allow anonymous usage per default. Therefore those apps will all be visible to the users.
Currently, the only way to avoid this behaviour would be to either not use the Login App Wizard to begin with or, alternatively, adapt the configuration made by the Wizard and remove anonymous usage from the application once again. In the latter case, please keep in mind though that you’d have to make further changes in the process flow of your application as the generated logic from the wizard tries to dynamically add the existing SSO providers to the login mask. The retrieval of those SSO providers is no longer going to work then.
We do plan to adapt the platform behaviour in a future release so that the execute permission for a given application should be the only deciding factor when determining the visibility of applications for end users. In order to facilitate this change, we’ve asked you to create a feature request in our Ideas portal for this matter.
