# \[Bug-12099\] Security Level Rules

**URL:** <https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494>\
**Category:** Ignition Early Access\
**Created:** [December 19, 2018, 1:48pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494 "2018-12-19T13:48:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![andrea.morando](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/andrea.morando/32/8039_2.png) [@andrea.morando](https://forum.inductiveautomation.com/u/andrea.morando)\
**Post date:** [December 19, 2018, 1:48pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494/1 "2018-12-19T13:48:31Z")

</div>

I tested the new security features introduced in Ignition 8. They seem very powerful.  
I created an Ignition Identity Provider, based on the “default” user source, where two roles have been set (Administrator and TestRole).

 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/a/a0fc5410873a5bd65f4fcc562534888035001cc7.png)  
I created a Security Level, called “RecipeEditor”, under the “Authenticated” tree item:  
 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/7/7b27cb318b0475efdd74e005fc09a29b9c9dcac2.png)  
Then, I set a Security Level Rule in my Identity Provider for the security level “RecipeEditor”:  
 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/4/415ba33b420edffcd698343511fd5d804f815daf.png)  
In a Perspective web page, I showed the “session.props.securityLevels” property, but the security level “RecipeEditor” (that should be granted by the security level rule) did not appear for my user!  
 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/7/71ef905715a2dde32fe1daf0c95e632b547ee715.png)

Where am I wrong?  
Thank you for your help.  
Andrea

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [December 19, 2018, 4:07pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494/2 "2018-12-19T16:07:47Z")

</div>

Hi -

Our QA team found that same bug a few days back and the fix got merged in last night. Could you update to the latest nightly build and let us know if that fixes the issue?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [December 19, 2018, 4:43pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494/3 "2018-12-19T16:43:54Z")

</div>

Actually, looks like last night’s build did not go through. I’ll post here when it gets pushed through.

---

<div class="post-metadata">

**Author:** ![andrea.morando](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/andrea.morando/32/8039_2.png) [@andrea.morando](https://forum.inductiveautomation.com/u/andrea.morando)\
**Post date:** [December 19, 2018, 5:31pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494/4 "2018-12-19T17:31:05Z")

</div>

Ok thanks. Let me know!

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [December 20, 2018, 4:14pm UTC](https://forum.inductiveautomation.com/t/bug-12099-security-level-rules/21494/5 "2018-12-20T16:14:21Z")

</div>

Hi -

Looks like last night’s build went through. Could you download it and let me know if you are still seeing the issue?