Skip to content

ACLs

An Access Control List (ACL) is a list of permissions attached to an object. Use the acl attribute on the itm node with a model equal to column, command, output, target, srs tag or row level access using dtacl on command Access can be limited using:

  • roles - ex. acl="sys_administrator"
  • teams - ex. acl="@teamshort" always starts with @ sign
  • users - ex. acl="[email protected]"
  • tenant - ex. acl="!tenantname" - always starts with ! sign , only authenticated user has this acl
  • authenticated - ex. acl="authenticated" - only authenticated user has this acl
  • anonymous - ex. acl="public" - public access anyone authenticated or not has this acl

Examples

XML
1
2
3
4
5
6
<srs label="Hello" acl="test">
  <def>
    <itm model="command" acl="@team1">select 'Hello Team1'</itm>
    <itm model="command" acl="@team2">select 'Hello Team2'</itm>
  </def>
</srs>
XML
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
<srs label="Hello World">
  <def>
    <itm>select 'Acl column test 1' test1 , 'Acl column test 2' test2</itm>
    <itm model="target" name="xlsx" label="Excel"/>
    <itm model="target" name="html"/>
    <itm model="target" name="xml"/>
    <itm model="target" name="pdf"/>
    <itm model="target" name="json" acl="@teamshort"/>
    <itm model="target" name="xlsx" acl="ims_excel"/>
    <itm model="target" name="json"/>
  </def>
</srs>