WebsiteJresearch Software Blog
The Algorithm of Evaluation
Apr 16, 2009 by Ekaterina Gorshkova
All the roles in the previous postings have only one permission, however a user is allowed to have several roles, and each role is allowed to have several permissions. So how is access granting evaluated? Currently the following rules apply in Flexess:
- If a permission has no constraint, it evaluates to true. If the permission has a constraint, then the result is the evaluation of the constraint.
- If at least one permission from the role evaluates to false, then role evaluates to false.
- If a least one role evaluates to true, then access is granted.
The following figure depicts the algorithm of evaluation:
In future releases we plan to have the algorithm of permission evaluation completely configurable.
Post a Comment:
Comments are closed for this entry.
