hybris - 使用 hybris 中的组成员的用户访问权限

Question

我有客户项目类型 "Appeasement"，其中包含枚举类型 "AppeasementStatusType"的属性 "appeasementStatus"。

对于 customersupportagentgroup，我们没有对项目类型“Appeasement”的写访问权限，但我想提供对属性“appeasementStatus”的写访问权限。我在impex下面创建，但这不能正常工作。
有什么想法吗？

enter code here
$START_USERRIGHTS;;;;;;;;;
Type;UID;MemberOfGroups;Password;Target;read;change;create;remove;change_perm
UserGroup;customersupportagentgroup;;;;;;;;
;;;;Appeasement;+;-;-;-;-
;;;;AppeasementStatusType;+;+;+;+;-
;;;;Appeasement.appeasementStatus;+;+;-;-;-
$END_USERRIGHTS;;;;;;;;;

Answer 1

你试图做的事情是不可能的。检查来自 https://help.sap.com/viewer/d0224eca81e249cb821f2cdf45a82ace/1905/en-US/8b4aa00e866910148df2920f69d68b27.html 的以下部分

Attribute Permissions

Using attribute permissions allows you to explicitly assign permission to selected attributes of a certain type. Attribute-related permissions don't override type-related permissions. For example, if the type permission for a type is set to deny: <Change>, you cannot grant permission: <Change> to any of the attributes of that type. You can, however, set the type permission for that type to permission: <Change>, and then decide which of the attribute-related permissions you want to set to permission: <Change>, and which to deny: <Change>.

总而言之，不能覆盖类型级别的权限以降低属性级别的严格性。

解决方法是相反的方式，即

授予 <write>访问 customersupportagentgroup对于项目类型，Appeasement .

拒绝 <write>访问 customersupportagentgroup对于所有属性，除了 appeasementStatus .