Multitenancy and Combination of the Rights Priorities
Various types of authorizations specified on the 'Permissions to Object Types' tab ('Field', 'Variable by Workflow' and 'Variable by Dataset') are applied exactly in the order in which they appear on the GUI by default:
- Field
- Variable by Workflow
- Variable by Dataset
This standard order of the evaluation of attribute authorizations can be modified using both the 'Multitenancy has the highest priority' and the 'User variable rights have the priority higher than any attribute value right' check boxes on the 'General' page of authorization manager.
Various settings of the check boxes can result in the following combinations:
Combination 1:
Multitenancy has the highest priority
|
Unchecked
|
User variable rights have the priority higher than any attribute value right
|
Unchecked
|
Attribute permissions evaluated in the following order:
|
1
|
Field
|
2
|
Variable by Workflow
|
3
|
Variable by Dataset
|
Combination 2:
Multitenancy has the highest priority
|
Unchecked
|
User variable rights have the priority higher than any attribute value right
|
Checked
|
Attribute permissions evaluated in the following order:
|
1
|
Variable by Workflow
|
2
|
Field
|
3
|
Variable by Dataset
|
Combination 3:
Multitenancy has the highest priority
|
Checked
|
User variable rights have the priority higher than any attribute value right
|
Unchecked
|
Attribute permissions evaluated in the following order:
|
1
|
Variable by Dataset
|
2
|
Field
|
3
|
Variable by Workflow
|
Combination 4:
Multitenancy has the highest priority
|
Checked
|
User variable rights have the priority higher than any attribute value right
|
Checked
|
Attribute permissions evaluated in the following order:
|
1
|
Variable by Dataset
|
2
|
Variable by Workflow
|
3
|
Field
|
|