Answers to: Difference between UserReadAll or UserReadName Permission / Permission Overview

Comment by Reto Weiss on Reto Weiss's answer

Reto Weiss — Tue, 21 Oct 2014 10:03:08 -0400

Hi Stephan

See question http://answers.axonivy.com/questions/1014 to find out where the permissions needed to call a method is documented

Comment by Stefan on Reto Weiss's answer

Stefan — Tue, 21 Oct 2014 07:28:50 -0400

Thanks, Reto. Is there any detailed documentation available?

Answer by Reto Weiss

Reto Weiss — Mon, 20 Oct 2014 16:57:46 -0400

The permission UserReadAll is necessary to call methods like ISecurityContext#getUsers() or ISecurityContext#findUser(...). So it gives you the right to access all user objects.

The permission UserReadName gives you the right to call the method IUser#getName() on any user object.

The permission UserReadOwnName gives you the right to call method IUser#getName() on the user object that represents yourself. E.g. the user object that is associated with the current session.