How to integrate Visual Guard in PB application

• Add the library of Visual Guard in library list of your target.
• Add the Dll of Visual Guard runtime in your directory project
• Integrate Visual Guard in the code of your application.
• Create a Visual Guard repository and declare your application by using the Visual Guard console. This repository will contain all security items (users, roles, permissions ...) of your application.
• Generate the Visual Guard configuration files by using the Visual Guard console. These configuration files will be needed to connect your application to the repository.
• Grant read/write permissions to the repository.

In order to use Visual Guard, you must add references to Visual Guard assemblies:

• Open the workspace of your project in PowerBuilder.
• In the solution explorer, expand the workspace node.
• Right-click the Target node for the workspace and select Properties… from the shortcut menu.
• In Library List tab, select the 2 libraries Novalys.visualguard.security.pbrt.pbl, Novalys.visualguard.security.pbrte.pbl .
• Click the OK button

If the library does not appear in this list you can use the Browse tab and select them in the directory Visual Guard Console\VG PB Runtime\PB version Description of Visual Guard libraries:

• Novalys.VisualGuard.Security.pbrt.pbl contains the main Visual Guard classes. The contents of this PBL should not be modified by developers.
• Novalys.VisualGuard.Security.pbrte.pbl contains the classes needed to extend the functionality of Visual Guard.
• Novalys.VisualGuard.Security.pbrt.dll contains the base classes and SSO manager.

There are 2 ways, you can connect to Visual Guard repository.

1. Using Visual Guard Server
2. Without Using Visual Guard Server (Using VGPBClient - Local system)

1) Using Visual Guard Server

[SECURITY]
VGServer=http://127.0.0.1:29000|http://127.0.0.1:29001
mergeRoles=Y
supportedAuthenticationModes=VG|AD|WBC
dynamicBrowser=Y
silentMode=Y
trace=Y

2) Without Using Visual Guard Server (Using VGPBClient - Local system)

Example of file configuration: myconfigfile.cfg

Copy

[SECURITY]
VGServer=VGPBClient
TraceServeur=Y (or N, to delete or no files exchange with VGPBClient for tracing execution).

Note
The program VGPBClient.exe and it's dependencies must be copied in the current directory of the secured PowerBuilder application. (Or in a path accessible by it). Novalys.VisualGuard.Security.dll Novalys.VisualGuard.Security.SQLServer.dll Or Novalys.VisualGuard.Security.Oracle.dll

Note
The VisualGuardConfiguration.config file of this program (VGPBClient) should be made correctly: Modify applicationId and connectionString with your values of application: applicationId="7e6b1582-9229-451a-a615-22ec70933353" connectionString="server=YOURSERVERNAME\YOURSQLEXPRESS;initial catalog=visualguarddb;Trusted_Connection=True;"

Note
The exchange files between PowerBuilder application and VGPBClient are generated, by default, in the directory: C:\ProgramData\Novalys\VisualGuard\FileTrsf

There is one main class in Visual Guard:

You must load the security before all other code. In this case you will be sure to set the security of all the objects of your application. Visual Guard will not automatically set the security of this window. In this case, you must set the security of this window after loading the permissions of the user (see the method vg_n_cst_vgmanager.SetSecurity ).

Declare the Security Manager

// Declare the security manager as global variable
vge_n_cst_vgmanager guo_vgmanager

Create the Security Manager

// Create the security manager
guo_vgmanager = CREATE vge_n_cst_vgmanager

Destroy the Security Manager

// Destroy the security manager
if IsValid(guo_vgmanager) then Destroy (guo_vgmanager)

Declare the Configuration file (and Trace file if use) of application

// Declare configuration file with your parameters to connect at Visual Guard Server
guo_vgmanager .of_setconfigfile ("myconfigfile.cfg")

// Declare the trace file if you use tracing action execution in your application
guo_vgmanager .of_settracefile ("mytracefile.log")

Authenticating a user with your own login window

// Authenticate a Visual Guard User and load the security data
if isvalid(guo_vgmanager) Then
    if guo_vgmanager.of_VerifyUser(VGlogin, VGpassword) > 0 Then
        Open(w_Main)
    Else
      Return
    End if
End if

// Authenticate a Windows User and load the security data
if isvalid(guo_vgmanager) Then
    if guo_vgmanager.of_VerifyUser() > 0 Then
        Open(w_Main)
    Else
        Return
    End if
End if

// Authenticate a Windows By Credential User and load the security data
if isvalid(guo_vgmanager) Then
    if guo_vgmanager.of_VerifyUser(VGlogin, VGpassword, vg_n_authenticationmode.windowsbycredential) > 0 Then
        Open(w_Main)
    Else
        Return
    End if
End if

• Check if that the Visual Guard account , the Windows account and Windows By Credential account exists
• Check if the user password if valid (Visual Guard account only)
• Check if the user has a valid profile on this application
• Load the application security related to the account profile

Secure Application Components

In general, this function is called in the open event of the ancestor window:

// Trigger the security in the open Event of the ancestor window
if isvalid(guo_vgmanager) Then
    guo_vgmanager.of_SetSecurity( this, "open", "")
End if

For the PFC, Add the following code:

// In the event “w_master.pfc_preopen” in “pfemain.pbl”:
if IsValid(guo_vgmanager) Then
    guo_vgmanager.of_SetSecurity ( this, "open", "")
End if

// In the event “w_master.pfc_postopen” in “pfemain.pbl”:
if IsValid(guo_vgmanager) Then
    guo_vgmanager.of_SetSecurity ( this, "postinit ", "")
End if

// In the event “u_dw.Constructor” in “pfemain.pbl”:
if IsValid(guo_vgmanager) Then
    guo_vgmanager.of_SetSecurity ( this, "constructor ", "")
End if