DataClass Permissions
Configuring DataClass Permissions
Refer to the 4D documentation to see how DataClass permissions interact with other permissions.
To set DataClass permissions for a specific privilege:
- Select the resource name, like the
Employeedataclass, from the dropdown list. - Or, type the resource name directly into the search bar.
The icon in the dropdown list indicates DataClass ressources.
Example: DataClass-Level Access Control
Building on the approach where the Guest privilege is granted initial read access to the entire datastore, you can gradually restrict access to specific resources by configuring DataClass permissions. This involves excluding the guest privilege from certain DataClasses.
While datastore permissions cascade down to DataClasses, they remain adaptable. DataClass permissions allow you to override or supplement the broader settings as needed.
- Create a
Restrictedprivilege for theEmployeeDataClass - Set all permissions to the
Restrictedprivilege.
In this context, the permissions set at the datastore level for the guest privilege are overridden by the Restricted privilege at the DataClass level. As a result, users with the guest role no longer have access to the Employee DataClass.