Nuclos record grant: $username, INTID, CANWRITE, CANDELETE, CANSTATECHANGE, user groups, PostgreSQL intid. |
Language: Deutsch · English
Permissions at record level – via a data source that returns the visible records per user.
On this page |
The record grant is a generic concept for permission restrictions at record level. The record grant data source type (Configuration → Data sources → Record grant) is assigned to a business object and receives $username as its only parameter.
Principle: username in → data source processes → list of visible records (INTID) out. The only mandatory column is INTID. |
| Column | Effect |
|---|---|
| CANWRITE | true/false (1/0): controls write access to the record (default: true). |
| CANDELETE | true/false (1/0): controls delete access to the record (default: true). |
| CANSTATECHANGE | since Nuclos 4.8: allows/denies status change independently of CANWRITE (default = value of CANWRITE). General status-change rights must still exist. |
Data sources can be nested; not every one must be assigned to a BO. This lets you model hierarchical or multi-dimensional permissions (e.g. site mapping). Existing permission mechanisms remain and are processed with higher priority.
Record grants must be assigned under Administration → user group to the user groups they should apply to. On PostgreSQL the |