Introduction

Security filters can be used to handle access to all CoreOne Suite entities that are stored in the database.

There are different types of security filters to achieve a high grade in flexibility to build different use cases for entity-level access.

Entity Type

All possible types that advanced permission management can handle are stored in the security_entity_type table.

Entity Type Default Rights

Each entity type has default rights attached to it. In the security_entity_type table, you will find a property called default_security_rights. This property defines the default rights that will be applied to all users.

For example, the IResourceAssignment entity has a GenericNoAccessFilter defined, meaning no one has access to it by default. On the other hand, the ICoreIdentity entity has a GenericMyCoreIdentityFilter defined, meaning everyone is allowed to read their own Core Identity by default.

Security Mode

The security mode defines which actions are allowed on the entity where access is given. The available rights are:

• Read

• Write

• Update

• Delete

• All