Controlling access to eSig_Config records

To control access to eSig_Config records, use the esigCust_ConfigAccessCtrl extension (do not use HCL Compass access control mechanisms). This extension is invoked during the execution of the ACCESS_CONTROL hook for the eSig_Config record; the last three arguments ($actionname, $actiontype, $username) come directly from the invocation of that hook.

sub esigCust_ConfigAccessCtrl {
    my ($session, $actionname, $actiontype, $username) = @_;
    return 1 if $username eq "admin";
    return 0;
} 
Arguments:
  • $session: The current session object.
  • $actionname: The name of the action that the user is attempting to execute.
  • $actiontype: The type of the action; one of the following:
    • CQPerlExt::SUBMIT
    • CQPerlExt::MODIFY
    • CQPerlExt::CHANGECQPerlExt::STATE
    • CQPerlExt::DUPLICATE
    • CQPerlExt::UNDUPLICATE
  • $username: The name of the logged-in user. (If LDAP authentication is in use, this is the HCL Compass user name, not the LDAP user name.)
Return value: 0 to prohibit access to an eSig_Config record; nonzero to grant access.