Validation user access operational permissions to an object prior to writing value to the object attribute

Desired functionality -

• possibility in run time to get security configuration for logged in user regarding operational permission to specifical security group
  or

• validation function that will return information if currently logged in user has permissions to write "operate" object attribute, w/o trying write to the attribute first.

This required for creating animation such as disable, invisible or specifical color indication on the graphical element if the element's owning object belongs to the security group to which logged in user does not have operational permissions.

Note. Only solution that I was suggested from AVEVA is to use AccessLevels. But AccessLevel has no relation to objects security groups.

Current situation - to check operational permissions, we need first to do test write and only after that, based on result, we can visualize "access denied" status on the graphical element for user who does not have relevant permissions .
Test write to "access denied" object attribute results in the several seconds timeout (both message in OCMC log and warning color on the element).

As I see in object viewer, application server objects have following property:

• Object.SecurityGroup - security group object belongs to

Also attributes have properties:

• Object.Attribute.SecurityClassification - classification such as - free access, operate, ...

• Object.Attribute.Category - such as user writable, object writable, ...

So it is possible to read security configuration for the object and attribute in run time, but no function / logged in user properties to match.