AX2012 ProjectExecution-Security Development Tool

Security Development Tool

http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-1/
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-2/
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-3/
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-4/
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-5/
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-6/
http://kaya-consulting.com/security-development-tool-part-7/

FAQ My understanding below: 

1.How to install Security Development Tool ?

Ans  

Credit : 
http://instructorbrandon.com/walkthrough-sarbanes-oxley-and-the-security-development-tool-in-dynamics-ax-little-known-dynamics-ax-powershell-trick-import-a-model/

Compile and synchronize on AOS

Install-AXModel via Management shell on AOS

2.How to check Authority by menu item and by button ?
Ans
Credit: 
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-1/

2.1 Go to System administration > Setup > Security > Security entry point permission

2.2 Choose Name. This example choose role name "Warehouse worker"
2.3 Press "Load additional" button. Then "Effective user license type" column will display. Also AX will show current user license type of this role.

     This example "Warehouse worker" role has "Functional Users" license type.

3. How to change Authority by menu item and by button?

Answer 
Credit:
http://kaya-consulting.com/tips-on-ax-2012-security-development-tool-part-2/

3.1 This example show "Warehouse worker" role was change privilege from "No access" to "Full control" on "SalesPostingHistoryInvoice" screen of "Account receivable" module.  

3.2 Test this  "Warehouse worker" role by login with user of this role. This role can not see "SalesPostingHistoryInvoice" menu

    Therefore Go to "Account receivable" menu. You can see "Effective user license type" of "Financial" Role.









3.3 Change privilege from "No access" to "Full control" on "SalesPostingHistoryInvoice" screen of "Account receivable" module. 

3.4 Click on Alloy Master and Right click "Set entry point permission for current node and expanded subtree items". Then subtree items will shown.

3.5 "Set entry point" screen will display. 
      Change on "New access level" column from "No access" to "Full control". Then press "Next" button.

      In other way, change on "Bulk update"-"Desired access level" is "Full control" and Click "Apply" button.


3.6 Below screen show Duty and Privilege of "Warehouse worker" role.

3.7 Click on duty and right click "New privilege". Then input privilege information.

3.8 AX will create new privilege

3.9 Click on privilege and right click "Apply entry point access levels to selection".

3.10.AX will apply access level. Current access level change to "Full control".

3.11 Then close "Set entry point" screen. You can see access level will change from "No access" to "Full control".
Current user license type change from "Functional Users" to "Enterprise Users"

3.12 Test this "Warehouse worker" role by login with user of this role. 
This role can see "Account Receivable" menu and view "SalesPostingHistoryInvoice" screen.

"Warehouse worker" role

SalesPostingHistoryInvoice

Remark There are Entry point type as below: