Access Control

WARNING: Users in your tenant, that have rights to access ClickHouse (needed for global search) also have read access to all your the tenant's content by means of ClickHouse queries (regardless of whether they have read access as specified by Access Control). This will change in a future release.

How permissions are determined

A Directory node controls access to the directory itself and (by default) everything inside it.

A Document node controls access to that specific document.

Inheritance (default behavior)

Permissions are inherited from ancestor nodes by default.

1. If you have access to a directory, you normally have the same access to its sub-directories and documents.
2. This makes it easy to manage access for an entire area by setting permissions once on a top-level directory.

Overrides

Inheritance can be overridden by setting modifying access properties at any position in the tree. For each role it can a completely new set of users/groups can be specified, or a delta (+/-) can be done on top of an inherited group.

Changing access permissions

To insert a link to external content with an URL proceed as follows:

NOTE: When editing permissions, the systems protects you from locking yourself out ('shooting yourself in the foot').

To change access permissions:

1. Select the Module or Document for which you want to modify the which you want to release in the Directory Browser using a
2. Context Menu → Properties and Access → Access Control
3. Adapt settings as required.