Making permissions conditional

[ramprasad]

In PermissionDefinitions.xml we define permissions for a type. Can it be made conditional?

Example: Let us say there is a property or an association. Based on the property or association the permissions or operations that you can perform on an instance might change. Is this possible?

[afaust]

The concept of conditionl permissions is what a globalPermission and dynamic authority are used for. The permission is defined as usual, but the globalPermission assigns that permission to a specific role (virtual), which a dynamic authority implementation (Java) checks at runtime if it applies to the current user based on the state of a node (type/aspect, properties, associations, whatever check you can think of, as long as it is extremely fast).

[ramprasad]

Thanks Axel.