Book a Demo

Author Topic: Protecting Sparx Jscript code  (Read 3733 times)

BruceTOGAF2

  • EA User
  • **
  • Posts: 74
  • Karma: +0/-0
    • View Profile
Protecting Sparx Jscript code
« on: September 03, 2020, 10:07:17 pm »
Using the Sparx Security Model, I can prevent other users from editing Sparx script code.  If a user is not permitted to edit scripts, then (within the Scripting window) the 'Edit' option is greyed out in the Script context menu. 

If a user is permitted to run scripts but not edit scripts, then the 'Edit' option is greyed out but the 'Debug' option is not greyed out. By selecting 'Debug', the code is displayed. The user cannot edit the code but they can copy and paste the code.

How can I disable the 'Debug Script' option whilst enabling the 'Run Script' option?

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13523
  • Karma: +574/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: Protecting Sparx Jscript code
« Reply #1 on: September 03, 2020, 10:11:42 pm »
I don't get it, why would it be a problem if a user sees the code?
If they want they can query the database for it as well, there's not really anything you can do about that.

Honestly I would forget about it. If a malicious user wants to do harm, they will not be stopped by EA's security features.
There are just there to prevent oopsies.

Geert

qwerty

  • EA Guru
  • *****
  • Posts: 13584
  • Karma: +397/-301
  • I'm no guru at all
    • View Profile
Re: Protecting Sparx Jscript code
« Reply #2 on: September 03, 2020, 10:18:47 pm »
While Geert is absolutely right you can always send a bug report/feature request (along with your wish list for Santa).

q.

Uffe

  • EA Practitioner
  • ***
  • Posts: 1859
  • Karma: +133/-14
  • Flutes: 1; Clarinets: 1; Saxes: 5 and counting
    • View Profile
Re: Protecting Sparx Jscript code
« Reply #3 on: September 03, 2020, 11:26:24 pm »
Hey guys,


I would agree that with the current set of scripting permissions available, Edit vs Run, debugging a script should fall under Edit rather than Run -- debugging is part of development. It shouldn't be a particularly hard fix for Sparx either, it's a pretty simple function that doesn't affect a bunch of other stuff.

So I think it's worth it to send a bug report.


/Uffe
My theories are always correct, just apply them to the right reality.