_progress._sec-granted-role-condition

This table is not supported for SQL and is only applicable to application defined roles, i.e. roles that do not begin with an underscore. This will not be checked for internal roles. This table extends the functionality for PVM (4GL client) specific application roles by facilitating the allocation of the role according to a pre-defined set of conditions. The role will therefore only be granted if all of the conditions are true using a logical AND operator. The failing of a grant condition is the equivalent of revoking the role. Example grant conditions could include only granting the role if the user authenticates to a specific login company, accesses a specific module of the application, or gains access between certain operating hours, etc. The grant condition attributes could be automatically checked at runtime during authentication against the authenticated credentials and the list of associated roles adjusted accordingly.