Access groups are described in several places :

Part_9_MDriven_Turnkey,_cloud_tools_and_access_groups

Turnkey_session_5:_How_to_access_the_logged_in_user._AccessGroups

Access_control_system_in_MDriven

AccessExpression

The main purpose of Access Groups are to control what is a visible and/or enabled for a user in a certain role or situation.

An access group (ag) can be set as being an Interest group (ig). An Interest group acts the same way as an Access group with these key differences:

1. An interest group only control visibility of actions - but access groups control enable and visibility for both actions and viewModels
2. An interest group is only evaluation if access groups is either missing of are evaluating to visibility true

The rational for Interest groups is to segment a large set of actions into different user chosen interest - so that actions could be filtered away from the UI so that users find the way easier.

The use of ClassActions can be very productive from the design perspective - but can also bloat UI's with actions that are not really needed in a certain use-case. Prior to interest groups we needed to opt-out these actions on a view by view basis. The interest groups makes it possible to filter away such actions based on some other criteria - like for example a user chosen focus.

Overview of access groups

You probably have different users in your system and these users are associated with an access group somehow (ActiveDirectory or something in your application).

You will want to allow and disallow user groups to execute actions.

This could be done as enable expressions on the Actions – but that would not be beneficial since it would kidnap the use of enable from the normal things we use enable for (check data state). Also, if a user is never allowed to execute “TheAdminInterface” it might be best to hide that action from view altogether.

To facilitate this, Modlr has a new concept called AccessGroups:

Clicking up the AccessGroup dialog shows you this:

Here, you can add groups and define the EnableExpression and VisibleExpression for the AccessGroups.

An AccessGroup contains actions - you can add and remove associations.

If an action is a member of multiple AccessGroups, the result will be;

(Group1.IsEnable OR Group2.IsEnable OR Group3.IsEnable) AND action.IsEnable

And to make the result visible:

(Group1.IsVisible OR Group2.IsVisible OR Group3.IsVisible) AND action.OptInInContext