This page provides a high level view on how we deal with authorization

Open

Authorization

Role assignment

A user will have one or more role assignments

For example, John Doe has been assigned

• The Operator Role on the invoices Scope

• The Team Leader Role on the salary slips Scope

So a role assignment is a tuple of a Role and a Scope

Open

Role

A role is put simply a set of permissions, e.g.,

• You can read a document

• You cannot change the settings of the review screen

This set of permissions is combined in a role, which is then given a name for easier reference

See Roles and Permissions

Scope

At contract.fit, we have four scope types which have a hierarchical relationship

• At the top level, we have the tenant

• A tenant can have a number projects

• A project can have a number of inboxes

• An inbox can contain a number of files