Recent changes to Permissions Logic

WikiPage Permissions Logic modified by Chriss Ioannou

Chriss Ioannou — Thu, 12 Jan 2012 14:45:26 -0000

--- v2 
+++ v3 
@@ -2,17 +2,19 @@
 
 Users and groups must be defined in order to access the system. All permissions are checked against the groups.
 
-    Each permission has various properties
-
+Each permission has a user friendly translatable description and "tagdata" , tagdata is the internal way for the system to understand what the user wants to do and if he is allowed to do it. 
+
+Tagdata logic:
+
+
     - Menu Actions / Entities (e.g. Companies table) : Prefix "ma_"
     - System Actions : Prefix "sa_"
     - Menu items : Permissions table flag
-    - Data related actions (e.g. Allow edit of companies table)
-        (View, Insert, Update, Delete, Print, Export) , no prefix used.
+    - Data related actions (View, Insert, Update, Delete, Print, Export) , no prefix used.
     - Documents actions : Prefix "do_"
 
+
 The permissions subsystem uses the above logic to allow/permit users view & edit data or documents.
-
 
 Each time the user requests an action, which is either displayed to him or maliciously someone tries to access this functionality, the system checks if the usergroup is allowed access to that function by checking the user permissions table.

WikiPage Permissions Logic modified by Chriss Ioannou

Chriss Ioannou — Thu, 12 Jan 2012 14:42:15 -0000

--- v1 
+++ v2 
@@ -14,7 +14,7 @@
 The permissions subsystem uses the above logic to allow/permit users view & edit data or documents.
 
 
-Each time the use requests an action, either it's displayed or maliciously someone tries to access this functionality, the system checks if the usergroup is allowed access to that function by checking the user permissions table.
+Each time the user requests an action, which is either displayed to him or maliciously someone tries to access this functionality, the system checks if the usergroup is allowed access to that function by checking the user permissions table.

WikiPage Permissions Logic modified by Chriss Ioannou

Chriss Ioannou — Thu, 12 Jan 2012 14:40:18 -0000

**ProtoHRM permissions logic** Users and groups must be defined in order to access the system. All permissions are checked against the groups. Each permission has various properties - Menu Actions / Entities (e.g. Companies table) : Prefix "ma_" - System Actions : Prefix "sa_" - Menu items : Permissions table flag - Data related actions (e.g. Allow edit of companies table) (View, Insert, Update, Delete, Print, Export) , no prefix used. - Documents actions : Prefix "do_" The permissions subsystem uses the above logic to allow/permit users view & edit data or documents. Each time the use requests an action, either it's displayed or maliciously someone tries to access this functionality, the system checks if the usergroup is allowed access to that function by checking the user permissions table.