Authorization

Magnar applies permission at the list, item, and field levels. You may give a user or security group authorization on an entity. Magnar's authorization is hierarchical, therefore if a user has read access on a business, he also has read permission on all entities under that company. Below are the permission levels listed in strength order:

1. Deny: User has no access to the entity at all
2. Security Admin: Has full control and ability to edit permissions.
3. Full Control: User has read, insert, edit and delete permission.
4. Edit: User has read and edit permissions.
5. Read: user has read permission.

If permission is assigned directly on an object, the inheritance will be broken and only the applied ones will be active.

All components have the permission management on the tool bar, you can press on manage permissions to view the list of assigned ones.

In this case we have direct permission assignment, you can notice that from the source type where it indicates if it is “inherited” or “Direct permission”

Permission is also applied on the field level when you can prevent a user or a group of uses from viewing some field in an entity, example: you can prevent user1 from viewing the passport number of an employee. To do that you need to go the entity, manage permission, select the user you want to apply the permission on, then press “Manage Permission” to open the management console.