You apply Access Rules to Access Template links. A single Access Rule or no Access Rule can be applied to a given link. By default, no Access Rule is applied, which configures an unconditional link. Applying an Access Rule creates a conditional link that has an effect only if the Access Rule’s conditional expression evaluates to True during permission check.
To apply an Access Rule, the Active Roles console provides the Access Rule tab in the Properties dialog box for an Access Template link. You can display a list of Access Template links in a number of ways:
- Right-click a container and then click Delegate Control. This displays a list of all Access Template links applied to that container or inherited from a higher-level container.
- Right-click a user or group and then click Delegated Rights. This displays a list of all Access Template links applied to that user or group or inherited from another security group.
- Right-click an Access Template and then click Links. This displays a list of all Access Template links referring to that Access Template.
In the list, double-click a link to open the Properties dialog box. The Access Rule tab in that dialog box includes the following items:
- Access Rule This field identifies the Access Rule that is currently applied to the Access Template link. If no Access Rule is applied, this field is empty; otherwise, the field displays the name of the Access Rule along with the path to the Access Rule object in the Configuration/Access Rules container.
- Change Click this button to select the Access Rule you want to apply to the link.
- Properties Click this button to view or change the Access Rule properties, including the Access Rule’s conditional expression.
- Clear Click this button if you want to remove the Access Rule from the Access Template link.
- To see if a given link has an Access Rule applied, refer to the Access Rule field in the list of Access Template links.