Developing an Extensible Data Security Policy

Developing an extensible data security policy involves the following steps:
1. Modeling the query on the primary table.
2. Creating the policy.
3. Adding the constrained tables and views.
4. Setting the context.
However, before you start developing a policy, you must understand the underlying requirements. You should identify the set of constrained tables and analyze the relationships that these tables have with the primary table. You should also analyze the data access patterns of the constrained tables, the table sizes, and existing indexes on both the primary and constrained tables. All of these aspects influence the impact that a policy will have on the performance of the application.

NOTE: For more information about developing an extensible data security policy, click here to download Developer Documentation

Data Security Policy Concepts

When developing a data security policy, you need to become familiar with several concepts, such as constrained tables, primary tables, policy queries, and context. This section outlines these concepts.

• Constrained table: A constrained table is the table or tables in a given security policy from which data is filtered or secured, based on the associated policy query. For example, in a policy that secures all sales orders based on the customer group, the SalesOrder table would be the constrained table. Constrained tables are always explicitly related to the primary table in the policy.

• Primary table: A primary table is used to secure the content of the related constrained table. For example, in a policy that secures all sales orders based on the customer group, the Customer table would be the primary table.

• Policy query: A policy query is used to secure the constrained tables specified in a given extensible data security policy. This query will return data from a primary table that is then used to secure the contents of the constrained table.

• Context: A policy context is a piece of information that controls the circumstances under which a given policy is considered to be applicable. If this context is not set, then the policy, even if enabled, is not enforced. Contexts can be of two types:

o A role context enables policy application based on the role or roles to which the user has been assigned.

o An application context enables policy application based on information set by the application.

Dynamics AX Build numbers

The build version numbers are split into three parts. First the client version number is listed, followed by the application version. Formatted like: Build #client version/application version/localization versions.

Contents Dynamics AX 2012 R3 Dynamics AX 2012 R2 Dynamics AX 2012 Dynamics AX 2009 Dynamics AX 4.0 Axapta 3.0

Dynamics AX 2012 R3

Build number	Version
6.3.126.8	2012 R3 CTP5
6.3.42.13	2012 R3 CTP4

Dynamics AX 2012 R2

Build number	Version
6.2.158.0	2012 R2
6.2.1000.156	2012 R2 Cumulative Update 1 (CU1)
6.2.1000.1437	2012 R2 Cumulative Update 6 (CU6)
6.2.1000.4051	2012 R2 Cumulative Update 7 (CU7)

Dynamics AX 2012

Build number	Version
6.0.852.78	2012 Beta
6.0.947.0	2012 RTM
6.0.947.61	2012 Cumulative Update 1 (CU1)
6.0.947.280	2012 Cumulative Update 2 (CU2)
6.0.947.862	2012 Feature Pack
6.0.1108.670	2012 Cumulative Update 3 (CU3)
6.0.1108.2423	2012 Cumulative Update 4 (CU4)
6.0.1108.4316	2012 Cumulative Update 5 (CU5)

Dynamics AX 2009

Build number	Version	RPC interface version
5.0.593.0	2009 RTM	50444.0 (C50C.0000)
5.0.593.439	2009 Hotfix Rollup 1 (RU1)	N/A
5.0.593.662	2009 Hotfix Rollup 2 (RU2)	N/A
5.0.593.827	2009 Hotfix Rollup 3 (RU3)	N/A
5.0.593.1084	2009 Hotfix Rollup 4 (RU4)	N/A
5.0.593.1287	2009 Hotfix Rollup 5 (RU5)	N/A
5.0.593.1429	2009 Hotfix Rollup 6 (RU6)	N/A
5.0.1000.52	2009 SP1	50444.0 (C50C.0000)
5.0.1500.358	2009 SP1 Hotfix Rollup 1 (RU1)	50444.0 (C50C.0000)
5.0.1500.809	2009 SP1 Hotfix Rollup 2 (RU2)	50444.0 (C50C.0000)
5.0.1500.1313	2009 SP1 Hotfix Rollup 3 (RU3)	50444.0 (C50C.0000)
5.0.1500.2116	2009 SP1 Hotfix Rollup 4 (RU4)	50444.0 (C50C.0000)
5.0.1500.2985	2009 SP1 Hotfix Rollup 5 (RU5)	50444.0 (C50C.0000)
5.0.1500.3761	2009 SP1 Hotfix Rollup 6 (RU6)	50444.0 (C50C.0000)
5.0.1500.4570	2009 SP1 Hotfix Rollup 7 (RU7)	50444.0 (C50C.0000)
5.0.1500.6491	2009 SP1 Hotfix Rollup 8 (RU8)	50444.0 (C50C.0000)

Dynamics AX 4.0

Build number	Version	RPC interface version
4.0.1659.26	4.0 RTM	41638.0 (A2A6.0000)
4.0.1659.35	4.0 RTM (localized)	N/A
4.0.2163.0	4.0 SP1	42060.0 (A44C.0000)
4.0.2500.XXX	4.0 SP1 DIS layer hotfixes	42060.0 (A44C.0000)
4.0.2501.116	4.0 SP2	42060.0 (A44C.0000)
4.0.2503.XXX	4.0 SP2 DIS layer hotfixes	42060.0 (A44C.0000)

Axapta 3.0

Build number Client version AOCP version 1951.8 3.0 N/A 1951.17 3.0 SP1 60029 (0xEA7D) 1951.18 3.0 SP1 N/A 1951.2410 3.0 SP2 60031 (0xEA7F) 1951.2411 3.0 SP2 Hotfixed 60031 (0xEA7F) 1951.3730 3.0 SP3 60031 (0xEA7F) 1951.3733 3.0 SP3 Hotfixed 60031 (0xEA7F) 1951.4060 3.0 SP4 60031 (0xEA7F) 1951.5160 3.0 SP5 61031 (0xEE67) 1951.6710 3.0 Kernel Rollup 1 61031 (0xEE67) 1951.7500 3.0 Kernel Rollup 2 63031 (0xF637) 1951.7609 3.0 Kernel Rollup 3 63031 (0xF637)

Build number Application version 514-90 3.0 SP2 514-193 3.0 SP3 514-320 3.0 SP4 514-513 3.0 SP5 514-859 3.0 SP6