XEO Security/Permissions

The XEO framework has a set of bult-in security/permission system to make it easier to develop your applications. There are three types of securities/permissions in a XEO Application, listed as follows:

• Object Model Permissions (Permissions)
• Object Policy Labelling (Security)
• Viewer Permissions (Permissions)

Object Model Permissions - Policies

Object Model Permissions allow you to define a system of permissions around Object Models. You can define that only a certain "set" of people can create/edit/delete instances of a certain object model, or only a certain set of people can see a particular attribute in an Object Model, or execute a given method in that Object Model.

This allows you do define a rule such as "Only the Managers group can see the "Total Project cost" in a given Project (assuming there's a group representing the managers, and a "Project" Object Model with an attribute representing the total cost of the project).

A Policy is an instance of the system Ebo_Policy Object Model which has a name and a description attribute