You probably have different users in your system and these users are probably associated with an access group somehow (ActiveDirectory or something in your application).

You will want to allow and disallow user groups to execute actions.

This could be done as enable expressions on the Actions – but that would not be very nice since it would kidnap the use of enable from the normal things we use enable for (check data state). Also if a user is never allowed to execute “TheAdminInterface” it might be best to hide that action from view all together.

To facilitate this Modlr has a new concept called AccessGroups:

Clicking up the AccessGroup dialog shows you this:

Here you can add groups and define the EnableExpression and VisibleExpression for the AccessGroups.

An AccessGroup the contain actions and you can add and remove the association here.

If an action is a member of multiple AccessGroups the result will be : (Group1.IsEnable OR Group2.IsEnable OR Group3.IsEnable) AND action.IsEnable

And for visible the result is (Group1.IsVisible OR Group2.IsVisible OR Group3.IsVisible) AND action.OptInInContext