Rights Management

The rights management in the easydb is in many parts multi-level, additive, and customizable by the administrator in real-time. The rights management changes the searchability and visibility of data and data sets.

NOTE: In multi-user environments, rights can be added to easydb addditively. This means that rights that are assigned to a user in one place can not be revoked elsewhere.

Essentially there is the possibility to:

1. define the rights and authorizations at the level of the system in order to control access for users and user groups to defined areas;
2. Configure authorizations at the level of the content and thus control the visibility of records

Records management functions in these areas:

• Object type
• Pool
• Tags
• Record

Rights assigned to the first two levels * Object type * and * Pool * refer to groups of records. They affect all records assigned to the range. The use of tags refers to groups of records as well as individual records.

In principle, it is possible to set up rights for individual users and user groups. By combining system, data and user rights, a very differentiated management of the rules is possible, as not only static access rights, but also dynamic rights processes can be represented.

User

Users are managed in easydb by the administrator. With appropriate permission, other users can also indirectly create new users (for example, e-mail users with restricted rights) and automatically create them (Anonymous users and folder users). More …

Groups

Each user can be in one or more groups. Rights can be assigned to groups. If a user is a member of several groups, he gets all the rights assigned to the groups to which he belongs. More …

Object Types

On this level, rights can be assigned for all data records of an object type. These rights can not be withdrawn via other layers such as pools, tags and individual data sets themselves, that is, Be careful when granting rights to users at this level. More …

Pools

Records of object types for the pool management is activated, can be equipped with their rights to a pool. Since pools are hierarchical, this can happen at different levels. Basically, the pools inherit configured attitude to their children, including the rights. More …

Tags & Workflows

Records tag management is enabled, can get any number of tags. Via tags, rights can be assigned and workflows (transcations) managed. More …

Tag Filter

Tag filters are available in several places in easydb and can be used for object types, pools, presets, and all records for which permissions have been activated (see data model). Where tag filters are available, the tags configured in the system are displayed. In our example, we have created several tags as an example.

In the present configuration, a record matches the tag filter if:

#. Tag1 or one is set (one) #. Tag2 and at night2 are set (All) #. Two is not set (None)

Only if all 3 conditions are met, the tag filter will fit.

Pools can contain both object types with tag management and object types without tag management. If the rights for both object types should be identical and you work without a tag filter, you can enter the rights in one permission row. If you work with tag filters, these also apply to the object type without tag management. For example, if you assign read rights to both object types in one permission row, but only if a particular tag is available, the records of the object type without tag management will never be visible (since the tag is not set there). Conversely, all records of the object type without tag management are always displayed if you use the tag filter “tag XY must not be set”. In these cases, you must split the permissions in two rows.

Preferences

If permissions are set in the preferences, users who do not have administrative rights can share records and folders with these predefined permissions. More …

System Rights

The system rights are explained centrally here. They can be configured for users and user groups.

Data Rights

Lists

Data rights are managed in lists. The lists are always based on the same principle, the rights which are configured with them are always context dependent. Within the lists, we are talking about rights. The order of the right-hand lines does not matter, since the rights are managed admirably.

In the context folders there are other settings: Active, Email, Link. For a more detailed description, see collections.

Rights

Rights can have parameters. If rights can be selected alternatively as radio buttons, they appear as checkboxes.