Understanding the security model

• Late bound model
• LDAP naming style
• Inheritance based on naming
• Follow the natural rules of the company
• Human readable
• Any combination of categories available
• Profile use available for simplified management
• Straight category assignment for better security granularity
• Infinite number of groups to be targeted are allowed
• Restrictions are added for specific actions over an object, i.e.:
  • View
  • Edit

We understand security is always changing in an application, so we create a human readable security model that can be applied AFTER the application is coded and easily modified!

Security is always present even in the simplest page that you can code or a generated CRUD, so unless you need more granularity or a special case you don't need to code for security

Tequila use LDAP naming style and inheritance to simplify security setting, all tasks are named like:

systems.your_system_name_set_in_config_file.tasks.task_name

The action the user wants to perform is added at the end of the name, i.e. 

systems.your_system_name_set_in_config_file.tasks. task_name.delete

You can assign permissions with high granularity or general ones.

Example: You want to secure delete customers in your CRM app

The security engine will check:

1. systems.mycrm.tasks.customers.delete
2. systems.mycrm.tasks.customers.all
3. systems.mycrm.tasks.delete
4. systems.mycrm.tasks.all
5. systems.mycrm.delete
6. systems.mycrm.all
7. systems.delete
8. systems.all
9. Global policy on security as set in config file

You can start with a general rule and just set security for the special exceptions.

Tequila security doesn't force you to create a collection of Roles and profiles, you SHOULD mimic the company structure to get maximum versatility. See example for more

Because it follows the company organization.

One of our main drives were to break the normal 1 category or maximum 2 categories limit found in most systems,  this limits normally result in a massive amount of roles being created or under usage of the system as it doesn't provide the required privacy / specialization.

Tequila security provide unlimited amount of categories, most systems will still only use 1, but well if your systems is complex you don't need to suffer :) 

In Tequila all works based on a clasifier-category combination, please check the example to understand more

Have many people following into the same categories? Sure we have profiles. You can use profiles + categories for maximum targetting