Changes

First, it will be necessary to define what rights there should be. In general, it should be possible to control whether a user is allowed to view ("read"), edit ("write"), create and delete data. Creation and deletion rights usually can be subsumed into the right to manipulate ("write") data.

Now that we have defined and configured rights, we have to evaluate them. This Assuming, you want to control the user rights for (mobile) applications, this is best done by customizing the ACM view. [[View_Item|View Items]] provide methods for delivering children, as well as for adding and removing children. These can happen be overwritten in many waysorder to evaluate the rights of the active login regarding a use-case. [[Query|Queries]] also can be customized to evaluate user rights. The [[Context]], which decides the best scope (ACM meta definition) for an object delivered to the client, can also be customized -->e.g., in order to provide meta definitions with different property read/write rights depending on the user group.