# Des. Security Tool has no vertical scroll bars

**URL:** <https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309>\
**Category:** Archived Topics\
**Created:** [September 30, 2009, 9:04pm UTC](https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309 "2009-09-30T21:04:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![eaolson](https://avatars.discourse-cdn.com/v4/letter/e/f07891/32.png) [@eaolson](https://forum.inductiveautomation.com/u/eaolson)\
**Post date:** [September 30, 2009, 9:04pm UTC](https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309/1 "2009-09-30T21:04:42Z")

</div>

I’m using a authentication profile that tries Active Directory, then fails over to internal authentication if necessary. If I go to the Designtime Security Tool, it pulls in about 40 roles from AD (most of which aren’t relevant, but that’s expected). The list, however, is longer than will fit in the window, but there’s no scroll bar, making some of the roles unreachable. I can even use the keyboard to move the cursor down the list, off the visible area of the window.

Also in this tool, I can shuttle roles out of the Selected Roles section to the left, and they disappear from that pane, but they never appear in the Available Roles pane, which is always empty. That makes it a one-way trip, and there’s no way to get them back, other than logging in again.

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [October 2, 2009, 4:25pm UTC](https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309/2 "2009-10-02T16:25:10Z")

</div>

Thanks for the error report, we’ll look into this.

Now, not that this is an excuse, but more of a heads up: the “Designtime security tool” is somewhat of a relic. Testing security code in the designer is problematic because of how the enabled property doesn’t work in a symmetric way. You should be testing security logic in the client. This feature is probably going to go away in the next major version.

---

<div class="post-metadata">

**Author:** ![eaolson](https://avatars.discourse-cdn.com/v4/letter/e/f07891/32.png) [@eaolson](https://forum.inductiveautomation.com/u/eaolson)\
**Post date:** [October 2, 2009, 7:44pm UTC](https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309/3 "2009-10-02T19:44:37Z")

</div>

What do you mean by “the enabled property doesn’t work in a symmetric way”?

(I’m not doing a lot of fancy security stuff, other than one button that’s made visible for a couple of privileged users, so whether it’s fixed or removed entirely is fine with me. I just thought you should know.)

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [October 2, 2009, 8:15pm UTC](https://forum.inductiveautomation.com/t/des-security-tool-has-no-vertical-scroll-bars/1309/4 "2009-10-02T20:15:36Z")

</div>

When you disable a container, it disables all of its children (including child containers). When you enable a container, children are not enabled.

Some users have gotten into a bit of a pickle when testing security settings in the Designer and inadvertently saving their windows with everything disabled, because the components don’t become re-enabled like they expected.