BPM Security Check

I am looking for a way to audit the security set in BPMs, or more specifically the Condition widget checks the caller user/group. I can’t find the table that holds this information, and I don’t think I can use the activity tracking either. Hopefully I am wrong about that.

Knowing which users are being checked would be nice but not needed. I am more so looking for the name of the directive if it is checking for a user/group.

Any insights would be much appreciated. Thanks!

Edit: I know that the custom code report exists. My hope is to create a dashboard for monitoring users access to the system so I don’t have to check a bunch of different screens.

Erp.UserFile The groups are in the field GroupList.

To see what’s actually in the BPM you’d have to parse the body from the BpDirective table. It’s in there somewhere. The users and groups are in table Kevin mentions.

1 Like

I found it. If you look in the XML body you can see the conditions. You’d have to parse it out. Here’s an example checking if the user is in the Functions Admin group.

<ConditionBlockItem.Condition>
  <ilbmc:UserGroupCondition VisualProperties="{x:Null}" GroupId="EfxAdmin" GroupName="Functions Administrator" Id="0" IsInGroup="True" ValidationState="Valid" />
</ConditionBlockItem.Condition>
1 Like