Oracle JHeadstart Developer's Guide - Downloads - Oracle

8.4. Conditionally Enabling Insert, Update an Delete
The previous sections explained how to enable or disable insert, update and delete
functionally for the group, regardless of user roles and permissions or the actual data.
To conditionally enable insert, update and delete operations you can use the Insert
Allowed EL Expression, Update Allowed EL Expression and Delete Allowed EL
Expression. These properties are available both on the Service-level and on Group level.
On service-level, you will typically use them in combination with permission-based
access control. See chapter 10 “Application Security”, section 10.7 “Restricting Group
And Item Operations based on Authorization Information” for more information.
On the group level you can refer to user roles, and you can make the operation enabled
based on the actual data shown on the page.
For example, if you have a business rule which specifies that users in the
HR_ASSSISTANT role can only delete job PU_CLERK and that HR_MANAGERS can
delete all jobs, then you can specify the following DeleteAllowed EL Expression to
implement this rule:
#{jhsUserRoles[‘HR_MANAGERS’] or (jhsUserRoles[‘HR_ASSISTANT’] and
bindings.JobsJobId.inputValue==’PU_CLERK’)}
users can only delete jobs where the Delete button in the Edit Jobs page should only be
available when the Job Id is
8- 6 Generating Transactional Behaviors JHeadstart Developer’s Guide