Table of Contents
Obliquid has a very flexible permission (security) system. A security object can be assigned to any number of users or a groups (or combination). It is recommended that only groups be used in order to simplify the administration of the system. Currently there are four types of security objects defined. These are mainly for convenience and formatting. Once an object is defined, it can be used anywhere. The four types are:
- Navigation Pages : these objects are checked by core/nav to see which icons should be displayed in the navigation slot
- Slot : these objects are checked by the system as part of loading a slot. If the user does not have permission to the slot function, then the code is not loaded, and the slot is not displayed.
- Operation : these are general purpose objects that can be created by the programmer for unique situations.
- Table/Key : these are a combination of a table name (without the $tprefix) and a key from the table. It can be used to check that a user has permission to a specific record in a table.
![[Note]](images/admonitions/note.png) | Performance consideration |
|---|---|
The system keeps the security information for a particular user in the $_SESSION array, so checking for permission is a relatively inexpensive operation. | |