How to restrict users to truncate a dataset?
Hi,
We have a requirement to restrict users to truncate a dataset which can be DDS and DatabaseTable etc.
Is there any OOTB privilege to prevent an access group to truncate a dataset or is it possible to satisfy this requirement by defining an Access Role To Object?
Thanks in advance!
Pegasystems Inc.
ES
@KaganKayawithout knowing all the context, I would say the best option would be to add the appropriate entries in the Access Role Name. Thinking quick and without investigating much I would say you can indicate the class of this object and set the delete instances value to 0.
Bolcom
NL
@VEIGIthanks a lot for your response! I have used the same approach by defining the dataset class(Adq-Testing-Data-AOMLog) with Delete Instance value to 0 but it does not work for the Decision Data Store( It works fine for database table dataset as expected)
The options(truncate, browse etc) for dataset are populated in Embed-DataSet-ActivityParams.pxPopulateOperations activity and seems to be handled in Embed-DataSet-Operation-Truncate-DDS class. However, although I have applied the same approach for this class, the records are being deleted from DDS.
Pegasystems Inc.
ES
@KaganKaya i am not an expert on DDS topic, maybe you can open a SR with PEGA to try to find a solution or try the solution suggested by @GunaSekaran_B. Hope this helps.
Lventur
IN
The easy way to bring this restriction would be, by using ABAC - Attribute Based Access Control.
You could have ABAC created in needed class with delete action and in Access Control Policy Condition you could have your logic to define who all will have access and not...
Basically ABAC is to control security/access related things.
Records -> Security -> Access Control Policy
Records -> Security -> Access Control Policy Condition
Bolcom
NL
@Gunasekaran Baskaranthanks for your help! The ABAC approach has the same result with the Role Based access control that @VEIGI mentioned. After defining the Access Control Policy(delete action) & Access Control Policy Condition rules for the dataset class, the records from DDS are deleted however they are not deleted from Database table dataset