02 — Administration (Studio From Scratch)

How administration objects relate

01 Development (tables, Script Includes, BR)
        │
        ▼
  Part 1 Roles (4 scoped roles)
        │
        ▼
  Part 2 Groups (grant roles to lab users)
        │
        ▼
  Part 3 Users (employee1, manager1, hradmin, integration)
        │
        ├──────────────────┐
        ▼                  ▼
  Part 4 ACLs          Part 5 System Properties (9 config keys)
  (read/write/create   (annual_days, notify, ERP endpoint…)
   on req_v2 via SI)
        │
        ▼
  Part 6 Update Set promotion (export to target)

Rule 0 — Before any object (Application + Update Set + Studio)

Repeat these checks before creating or editing any application file. This section is also section 00 Update Set — create the capture set first.

1. Application picker — top-right globe / application menu → select HR Leave (x_786686_hr_leave). Never leave Global selected when creating scoped artifacts.
2. Update Set — All → System Update Sets → Local Update Sets → New:

   Field	Value
   Name	HR Leave – Build
   Application	HR Leave
   State	In Progress
   Description	Captures all HR Leave lab artifacts

   After submit: open the record → click Make Current. Direct list: {BASE}/sys_update_set_list.do
3. Open Studio — {BASE}/$studio.do → confirm header shows HR Leave.

Part 1: Roles

Purpose

Defines four scoped roles for employee self-service, manager approval, HR admin, and integration REST access.

Navigation path

Direct URL

Prerequisites

• Part 1: Application Setup (01 Development).
• Rule 0 Update Set current.

Form fields

Repeat for three more roles:

Step-by-step create

1. For each row: Studio → Role → New.
2. Name = scoped role name. Description as table. Application = HR Leave.
3. Submit. Repeat four times.

Verify checklist

• Four roles filtered by x_786686_hr_leave.

Demo / test

Part 2: Groups

Purpose

Assignment groups that grant scoped roles to lab users.

Navigation path

Direct URL

Prerequisites

• Part 1: Roles exist.

Form fields

Step-by-step create

1. Groups → New → Name from table.
2. Related list Group Roles → Edit → add scoped roles.
3. Related list Users → add members.
4. Repeat for all four groups.

Verify checklist

• User record → Roles related list shows inherited group roles.

Demo / test

Part 3: Users (lab matrix)

Purpose

Four lab users for E2E testing.

Navigation path

Direct URL

Prerequisites

• Part 2: Groups ready.

Form fields

Step-by-step create

1. Users → New for each row. Set password per instance policy.
2. Active = true. Email required for notifications (chapter 06).
3. Add to group via Groups related list.
4. Seed employee_v2: employee1 user, manager = manager1, Employee ID E-1001.

Verify checklist

• Impersonate each user successfully.
• employee_v2 links employee1 → manager1.

Demo / test

Part 4: ACLs

Purpose

Record and field ACLs enforce who can read, write, and create leave requests using HRLXProSecurityUtilsV2.

Navigation path

Direct URL

Prerequisites

• Part 7: HRLXProSecurityUtilsV2 (01).
• Part 1: Roles.
• Elevate security_admin.

Form fields

ACL 1 — read

ACL 2 — write

ACL 3 — create

ACL 4 — field write u_approver_user

Step-by-step create

1. Elevate security_admin. Application = HR Leave.
2. ACL → New for each table above. Active = true.
3. Paste scripts. Save all four.

Verify checklist

• employee1 sees own requests only.
• manager1 sees direct reports.
• hradmin sees all.
• employee1 direct URL to another user's record → denied.

Demo / test

Part 5: System Properties

Purpose

Scoped configuration — create all 9 properties from the professional catalog.

Navigation path

Direct URL

Prerequisites

• Part 1: Application Setup.

Form fields — create each row

On every property form: Application = HR Leave · Ignore cache = false · Private = false.

Step-by-step create

1. Application picker = HR Leave.
2. Open New property.
3. Fill Label, Name, Type, Value, Description from one row → Submit.
4. Repeat for all 9 rows.

Verify checklist

• Background: gs.info(gs.getProperty('x_786686_hr_leave.config.annual_days')); → 20.
• Nine properties visible in scoped list.

Demo / test

Part 6: Update Set Promotion

Purpose

Complete and export HR Leave – Build for target instance promotion.

Navigation path

Direct URL

Prerequisites

• All Parts 1–5 captured in HR Leave – Build.
• Rule 0 Update Set was current during creates.

Form fields

Step-by-step create

1. Complete local set — HR Leave – Build → State = Complete.
2. Export — Retrieved Update Sets → Import from source OR XML export.
3. Target instance — Import → Preview conflicts → Commit.
4. Post-import — Recreate users/groups if not in set; verify 9 properties; run accrual job once.
5. Smoke test — employee1 submit → manager1 approve → balance updated.

Verify checklist

• Customer Updates lists roles, ACLs, properties.
• No Global-scope rows in set.

Demo / test

Administration verify checklist

1. Four scoped roles exist under HR Leave.
2. Four groups with correct role assignments and lab users.
3. Four lab users impersonate successfully; employee_v2 seeded.
4. Four ACLs active; employee isolation verified.
5. Nine system properties readable via gs.getProperty.
6. Update Set Complete and ready for export.