Answers to: PermissionDeniedException when calling iUser.getAllRoles()

Comment by Reto Weiss on Raphael Bürgin's answer

Reto Weiss — Tue, 04 Mar 2014 17:21:59 -0500

The method getRoles() only returns the roles that are directly assigned to the user. Whereas the method getAllRoles() returns also the roles that the user inherits because of the hierarchy of the roles.

Comment by Tran Cuong Truc on Tho Tran's answer

Tran Cuong Truc — Thu, 27 Feb 2014 03:21:29 -0500

This way is overtake the root permisson, it works thought but I'm worry about security.

But anyway, it will be an alternative way if the method below doesn't work. :)

Answer by Raphael Bürgin

Raphael Bürgin — Wed, 26 Feb 2014 15:42:13 -0500

Hello,

You can execute your code with systemUserPermissions using a callable function. In this Example I get a List of Roles of a User.

List<IRole> roles = Ivy.session().getSecurityContext().executeAsSystemUser(new Callable<List<IRole>>(){
            public List<IRole> call() throws Exception {
                List<IRole> roles = iuser.getRoles();
                return roles;
            }

        });

Answer by Tho Tran

Tho Tran — Wed, 26 Feb 2014 09:54:57 -0500

Grant Developer's permission for your Test User role

ivy.session.loginSessionUser("Developer","Developer");
ivy.wf.getApplication().getSecurityDescriptor().grantPermissions(ivy.wf.getApplication().getSecurityDescriptor().getSecurityDescriptorType().getRootPermissionGroup(),
                ivy.session.getSecurityContext().findRole("Everybody")
);