Documenos
Loading ...

Rights Management

In Documenos®, authorization is a multi-dimensional concept.

Performing actions Access Usage Special permissions
Documenos ®

Four dimensions of authorization

Documenos ®

1 — Performing actions

Assigned from the administration panel via groups; group members gain the permission to perform actions.

Documenos ®

2 — Access

Access and action permissions for container areas such as archives, document management file plan codes and general ledger account codes can be assigned specifically to individuals, groups or units.

Documenos ®

3 — Usage

For content generated from templates, such as document or form templates, process file templates and workflow templates, permissions to use the template can be assigned specifically to individuals, groups or units.

Documenos ®

4 — Special permissions

Individuals, groups or unit managers can be specifically authorized to access and/or act on an entire process file or certain of its steps, certain steps of a workflow record, or a contract record.

Documenos ®

Sometimes "the permission to perform an action" is not enough, for example:

Documenos ®

Investment Projects

To control access to documents in a specific area, access to the file plan code named "Investment Projects" must be restricted.

Documenos ®

Bank Accounts

The permission to view all accounting account codes named "Bank Accounts" or to post to these accounts must be restricted.

Documenos ®

Dismissal

Only a specific group is expected to see and act on the "Dismissal" workflow.

In most scenarios, answering the question which action can they perform is not enough; answering where can they perform this action may be more important.

Why this way?

An authorization model that stays manageable as you grow

These principles were introduced into Documenos® to simplify authorization management and make it more flexible.

With classic authorization logic, authorization and confidentiality will sooner or later either become unmanageable for large enterprises, or the question of who accessed confidential, protected data, when and from where will turn into an unanswerable nightmare.