Changes between Version 8 and Version 9 of BluePrintAuthorizationB
- Timestamp:
- 06/20/10 14:35:22 (15 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
BluePrintAuthorizationB
v8 v9 4 4 == General model == 5 5 6 === Authorizable Methods === 7 6 8 Authorization is implemented for the following methods: 7 9 8 - module access 9 - controller access 10 - module access (execute, all controllers of the module) 11 - controller access (execute) 10 12 - table access (create/read/update/delete and custom method) 11 13 - record access (create/read/update/delete and custom method) 14 15 === Basic Policy === 12 16 13 17 Authorization policy is implemented as: … … 15 19 - if a method is not restricted, then it is accessible for everyone 16 20 - if a method is restricted, then permission must be explicitly granted, otherwise it is denied (Allow=>Deny order) 21 22 === Roles === 17 23 18 24 Permissions are assigned to roles (not to individual users):