Roles and permissions¶
Roles and permissions is the ACL matrix for DMS. It grants or denies
resource:action permissions to users and security groups.
This is not a role-inheritance model
DMS does not build roles as containers that inherit permissions from other
roles. This page edits ACL entries directly. The rol field on a user is a
display/legacy value; authorization comes from ACL, sharing rules, and the
resource checks.
Grant or deny a permission¶
- Open Administration → Roles and permissions.
- Choose a user or security group.
- Add a permission entry.
- Choose the resource, the action, and allow or deny.
- Save.
How permissions combine¶
- A user receives permissions directly and through security groups.
- Deny overrides allow.
- Wildcards are supported, such as
resource:*,*:action, and*:*. *:*is the superadmin grant.
Some resources are hidden from the matrix, and some actions are enforced by the API without appearing in the UI.
Permissions¶
rol:ver— view the matrix.rol:editar— change entries.