Skip to content

Clarify Manageable Roles - #11753

Open
MarkvanMents wants to merge 6 commits into
developmentfrom
MvM-ClarifyManageableRoles
Open

Clarify Manageable Roles#11753
MarkvanMents wants to merge 6 commits into
developmentfrom
MvM-ClarifyManageableRoles

Conversation

@MarkvanMents

Copy link
Copy Markdown
Collaborator

There is confusion about the way that manageable roles work, and there is also a major confusing change in the UX.

This PR aims to clarify how manageable roles work.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@MarkvanMents
MarkvanMents requested a review from knorrie August 18, 2026 07:07
@MarkvanMents
MarkvanMents marked this pull request as ready for review August 19, 2026 09:43

{{% alert color="warning" %}}
The effects of changes to user roles are not immediate. This means that your app might show outdated pages or incorrect data. For more information, please refer documentation about [persistent sessions](/refguide/clustered-mendix-runtime/#sessions-are-always-persistent).
The effects of changes to user roles are not immediately applied to end-users who are signed in to the app. End-users need to sign out and sign in again to pick up their new roles. This means that your app can show the wrong pages or data. For more information, refer to the documentation on [persistent sessions](/refguide/clustered-mendix-runtime/#sessions-are-always-persistent).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

End-users need to sign out and sign in again to pick up their new roles.
Or wait 30s (i.e. the SessionValidationTimeout). After 30s the session will be revalidated by fetching it from the database, which will have the updated roles.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should be cautious in the wording. There are all kinds of places where the logged in users roles are cached and used to make decisions about for example what kind of interface elements to show or not in the web client.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants