7.2. Authorization Model
- The user performing the action
- The type of action being performed
- The object on which the action is being performed
For an action to be successfully performed, the user must have the appropriate permission for the object being acted upon. Each type of action corresponds to a permission. There are many different permissions in the system, so for simplicity they are grouped together in roles.
Figure 7.1. Actions
Permissions enable users to perform actions on objects, where objects are either individual objects or container objects.
Figure 7.2. Permissions & Roles
Important