In Documenos®, authorization is a multi-dimensional concept.
Assigned from the administration panel via groups; group members gain the permission to perform actions.
Access and action permissions for container areas such as archives, document management file plan codes and general ledger account codes can be assigned specifically to individuals, groups or units.
For content generated from templates, such as document or form templates, process file templates and workflow templates, permissions to use the template can be assigned specifically to individuals, groups or units.
Individuals, groups or unit managers can be specifically authorized to access and/or act on an entire process file or certain of its steps, certain steps of a workflow record, or a contract record.
To control access to documents in a specific area, access to the file plan code named "Investment Projects" must be restricted.
The permission to view all accounting account codes named "Bank Accounts" or to post to these accounts must be restricted.
Only a specific group is expected to see and act on the "Dismissal" workflow.
In most scenarios, answering the question which action can they perform is not enough; answering where can they perform this action may be more important.
These principles were introduced into Documenos® to simplify authorization management and make it more flexible.
With classic authorization logic, authorization and confidentiality will sooner or later either become unmanageable for large enterprises, or the question of who accessed confidential, protected data, when and from where will turn into an unanswerable nightmare.