Blog

Secure your apps with the Static Access Control Rules (SACR)

Labels
AI(12) AJAX(112) App Studio(10) Apple(1) Application Builder(245) Application Factory(207) ASP.NET(95) ASP.NET 3.5(45) ASP.NET Code Generator(72) ASP.NET Membership(28) Azure(18) Barcode(2) Barcodes(3) BLOB(18) Business Rules(3) Business Rules/Logic(140) BYOD(13) Caching(2) Calendar(5) Charts(29) Cloud(14) Cloud On Time(2) Cloud On Time for Windows 7(2) Code Generator(54) Collaboration(11) command line(1) Conflict Detection(1) Content Management System(12) COT Tools for Excel(26) CRUD(1) Custom Actions(1) Data Aquarium Framework(122) Data Sheet(9) Data Sources(22) Database Lookups(50) Deployment(22) Designer(178) Device(1) Digital Workforce(3) DotNetNuke(12) EASE(20) Email(6) Features(101) Firebird(1) Form Builder(14) Globalization and Localization(6) HATEOAS(3) How To(1) Hypermedia(2) Inline Editing(1) Installation(5) JavaScript(20) Kiosk(1) Low Code(3) Mac(1) Many-To-Many(4) Maps(6) Master/Detail(36) Micro Ontology(5) Microservices(4) Mobile(63) Mode Builder(3) Model Builder(3) MySQL(10) Native Apps(5) News(18) OAuth(9) OAuth Scopes(1) OAuth2(13) Offline(20) Offline Apps(4) Offline Sync(5) Oracle(11) PKCE(2) Postgre SQL(1) PostgreSQL(2) PWA(2) QR codes(2) Rapid Application Development(5) Reading Pane(2) Release Notes(185) Reports(48) REST(29) RESTful(30) RESTful Workshop(15) RFID tags(1) SaaS(7) Security(81) SharePoint(12) SPA(6) SQL Anywhere(3) SQL Server(26) SSO(1) Stored Procedure(4) Teamwork(15) Tips and Tricks(87) Tools for Excel(3) Touch UI(93) Transactions(5) Tutorials(183) Universal Windows Platform(3) User Interface(338) Video Tutorial(37) Web 2.0(100) Web App Generator(101) Web Application Generator(607) Web Form Builder(40) Web.Config(9) Workflow(28)
Archive
Blog
Thursday, May 8, 2025PrintSubscribe
Stop Coding, Start Securing: Visually Configure Row-Level Security in Minutes!

Application security, especially controlling who sees what data, is often a complex and time-consuming task. Developers traditionally wade through lines of code or repetitive configurations to implement row-level security, making it prone to errors and difficult to audit. What if you could define and test these critical data access rules visually, getting instant feedback and ensuring your application is locked down precisely as intended, all without writing a single line of server-side code for most common scenarios?

Introducing Static Access Control Rules (SACR) in Code On Time, now supercharged by the integrated App Studio 2025. We've taken the power of declarative, SQL-based security and paired it with an intuitive visual interface. Imagine defining rules like "users only see their own orders" or "managers in the Sales department can only see customers in their region" through a simple point-and-click configuration, directly within your live application preview. No more hunting through business rule files or worrying if your custom code covers every edge case for standard security patterns!

With App Studio, configuring SACR becomes a breeze. See at a glance which parts of your application are protected with clear visual cues like the "security shield" icon directly in the App Explorer. Define rules using straightforward properties, get instant feedback on their impact, and even use the "Related Items" feature to see exactly which data fields and views are affected by a specific rule. Debugging is simplified to toggling a rule's Enabled status and observing the change immediately. This visual approach not only accelerates development but also makes your security posture transparent and significantly easier to maintain.

Ready to transform how you handle data security? Stop wrestling with complex code for common security needs and embrace the power of visual configuration. Learn how to master Static Access Control Rules with our comprehensive tutorial and start building more secure applications, faster.

Click here to learn how to master Static Access Control Rules with our comprehensive tutorial.
image2.png
This access control rule is triggered by the presence of the LastName data field in the view. The framework will filter in the rows that have the trigger field value that matches the user’s name. The rule applies to the views of all existing and future data controllers of the application.
image1.png
The maroon “security shield” icon is overlaid on the relevant configuration nodes of Customers, Employees, and Orders data controllers. The icon subtly hints of the security restrictions in the application making it possible at-a-glance security check. The Access Control property group of the affected nodes contains the Triggers property with the list of relevant “trigger” fields defined in SACR.
Friday, April 11, 2025PrintSubscribe
A Glimpse into Unprecedented App Building Power

The Code On Time roadmap is focused on dramatically lowering development costs and empowering developers to create sophisticated applications with unprecedented speed and ease. This vision is driven by the introduction of embedded development tools directly within the application itself, streamlining the entire development lifecycle. This innovative approach eliminates the traditional complexities and overhead associated with custom app development, making it far more accessible and cost-effective.

A key element of this roadmap is the reimagining of Windows-based tools and the introduction of the App Studio. This feature provides a unified environment for designing, developing, and deploying applications. Developers can visually design the app, generate code, and manage various aspects of the project, all within a single, intuitive interface. This streamlines the workflow, reduces the learning curve, and significantly boosts productivity.

The roadmap also emphasizes enhanced compatibility and modernization. Existing applications will benefit from compatibility mode, ensuring a smooth transition to the latest platform. New projects will leverage .NET Core 9 support, enabling the development of modern, high-performance web applications. This commitment to both legacy support and modern design principles ensures that Code On Time remains a versatile and future-proof solution.

Code On Time is expanding its capabilities with a powerful Content Hub. This new feature will provide a centralized repository for managing application content, including text, images, and other digital assets. The Content Hub will also power the Community and Helpdesk features, which will be integrated directly into the App Studio, streamlining content creation, editing, and publishing for these resources and making it easier to keep applications up-to-date and engaging. This will empower developers to build more dynamic and content-rich applications with greater efficiency.

Looking ahead, Code On Time is committed to empowering developers to build increasingly sophisticated and user-friendly applications. The roadmap emphasizes a future where app development is more intuitive, efficient, and accessible to a wider range of users.

Explore the exciting future of Code On Time!
Monday, April 7, 2025PrintSubscribe
Introducing App Explorer

App Studio 2025 introduces significant enhancements to the Code On Time development environment, focusing on streamlined app customization and improved user experience. Key features include the “App Explorer”, which combines a hierarchical view of app configurations with the Properties Grid, offering both horizontal and vertical layouts, as well as a table mode for easier navigation. “Live Inspection" allows developers to directly interact with the live application UI to select and modify configuration elements, while “Global Search” enables querying across all configuration hierarchies. Additional features such as “Background Inspection”, “Peek Through”, and “Auto Complete” further enhance the development workflow.

The App Explorer provides a tabbed interface for quick access to different configuration sections like Settings, Models, Controllers, and Pages, and it supports both tree and table views with breadcrumb navigation. Live Inspection simplifies the process of locating and modifying configuration elements by clicking on the UI, with background inspection and pulsating icons indicating corresponding UI elements. Global Search allows for comprehensive searches across the app configuration, including specific terms and related items, with search results displayed in a list with full paths and element types.

Transform your app development workflow with the all-new App Studio 2025! Unlock powerful features like Live Inspection, Global Search, and the innovative App Explorer. Ready to revolutionize your development process? Dive into the details and learn more about App Studio 2025 now!

Upcoming features planned for future releases include a standalone mode for launching apps directly from the App Studio homepage, an Assistant panel that provides contextual information and guidance, and a Toolbox panel that facilitates the creation and transformation of UI elements. The API View will also be introduced, allowing developers to work with RESTful APIs of Code On Time applications. These updates aim to enhance the developer experience, streamline the workflow, and make the powerful configuration options of Code On Time more accessible to both new and expert users.

image3.png

The provided screenshot displays the App Explorer following a live inspection of the "Product Name" column header. The image shows the attached hierarchy and properties side-by-side, with the "Label" property of the "ProductName" field selected. A brief description explains the property's purpose. Tabs within the title grant quick access to "Settings", "Models", "Controllers", and "Pages". The right side of the title contains buttons for "Search", "Display Hierarchy as Table", "Split Vertically", and "Close".

image1.png

The ability to view key node properties in a table format is incredibly useful. Clicking on a cell within the table rows will highlight the corresponding node in the Properties Grid and focus on the property associated with that cell. Boolean properties are displayed as checkboxes, allowing you to toggle the property value simply by clicking on them. Click the “Display Hierarchy as Tree” to switch to the standard navigation.

image2.png

Finding application configuration elements is easy with App Studio's built-in search feature. Simply click the "Search" button located in the top toolbar of the studio, and enter your search terms into the provided prompt. The search icon within the prompt will pulsate to indicate that the search is in progress. Results will be displayed as a list of hierarchy nodes, each with its full path, including the hierarchy itself. Select any node to view it in the App Explorer.