BizRules opt-in

  • Article

Heads up to a change on Vista; if you get something like this error:

Business rule scripts are disabled for the calling application. (Exception from HRESULT: 0xC0090003)

You're experiencing a new default for AzMan in Vista and beyond. That is, BizRules are opt-in now. Each application can say whether or not it wants to allow BizRules to execute. This setting is on the machine not on the store.

To enable BizRules for an application run the following script:

'

' Enabling or disabling BizRules for an application

' This script uses Authorization Manager Administrative interfaces to enable or disable

' BizRules for a specified AzMan application in a specified AzMan policy store

On Error Resume Next

Set objArgs = WScript.Arguments

If objArgs.count <> 3 then

  wscript.echo "Usage: SetBizRule ""AzManStoreURL"" ""AzApplicaitonName"" True/False"

  wscript.echo "Example: SetBizRule ""msxml://d:\inetpub\wwwroot\AzStore.xml"" ""MyApp"" True"

  wscript.echo "Run with 'cscript' command in cmd.exe to avoid msg boxes"

  WScript.Quit

Else

  ' VBScript source code

  Dim AzStoreObj

  Dim AzManStoreURL : AzManStoreURL = objArgs(0)

  Dim AzManAppName : AzManAppName = objArgs(1)

  Dim BizRulesEnabled : BizRulesEnabled = objArgs(2)

  ' create azman object

  Set AzStoreObj = CreateObject("AzRoles.AzAuthorizationStore")

  If Err.Number > 0 Then

    WScript.Echo "Can not create AzRoles.AzAuthorizationStore. Check AzMan installation"

    WScript.Quit

  End If

  ' initialize store for Administration

  ' assumes store exists - if store is being created (e.g. an installing applicaion)

  ' use the value 3 instead of 2 in the call to IAzAuthorizationStore::initialize

  Err.Clear

  AzStoreObj.Initialize 2, AzManStoreURL

  If Err.Number <> 0 Then

    WScript.Echo "AzRoles.AzAuthorizationStore failed to initialize. Check store URL"

    WScript.Quit

  End If

  ' open applicaion

  set AzApp = AzStoreObj.OpenApplication(AzManAppName)

  If Err.Number <> 0 Then

    WScript.Echo "AzRoles.AzAuthorizationStore failed to open application: " + AzManAppName + ". Check application Name."

    WScript.Quit

  End If

  ' set BizRulesEnabled property

  WSCript.Echo "App BizRule Before:" & AzApp.BizRulesEnabled

  AzApp.BizRulesEnabled = BizRulesEnabled

  WSCript.Echo "App BizRule After:" & AzApp.BizRulesEnabled

  If Err.Number = 0 Then

    WScript.Echo "BizRulesEnabled is updated successfully."

  Else

    WScript.Echo "BizRulesEnabled is NOT updated successfully."

  End If

End if

This info is in the online help but I figured some folks may not look there.

 

-Dave