#Action Permissions

#Introduction

In NocoBase 2.0, action permissions are currently mainly controlled by collection resource permissions:

• Collection Resource Permission: Used to uniformly control the basic action permissions of different roles for a collection, such as Create, View, Update, and Delete. This permission applies to the entire collection under the data source, ensuring that a role's corresponding action permissions for that collection remain consistent across different pages, popups, and blocks.

#Collection Resource Permission

In the NocoBase permission system, collection action permissions are basically divided along CRUD dimensions to ensure consistency and standardization in permission management. For example:

• Create Permission: Controls all create-related actions for the collection, including add actions, duplicate actions, etc. As long as a role has the create permission for this collection, its add, duplicate, and other create-related actions will be visible on all pages and in all popups.
• Delete Permission: Controls the delete action for this collection. The permission remains consistent, whether it's a bulk delete action in a table block or a delete action for a single record in a details block.
• Update Permission: Controls update-type actions for this collection, such as edit actions and update record actions.
• View Permission: Controls the data visibility of this collection. Related data blocks (Table, List, Details, etc.) are only visible when the role has view permission for this collection.

This universal permission management method is suitable for standardized data permission control, ensuring that for the same collection, the same action has consistent permission rules across different pages, popups, and blocks, providing uniformity and maintainability.

#Global Permissions

Global action permissions apply to all collections under the data source, categorized by resource type as follows

#Specific Collection Action Permissions

Specific collection action permissions override the general permissions of the data source, further refining action permissions and allowing for custom permission configurations for accessing resources of a specific collection. These permissions are divided into two aspects:

1. Action Permissions: Action permissions include add, view, edit, delete, export, and import actions. These permissions are configured based on the data scope dimension:

   • All records: Allows users to perform actions on all records in the collection.
   • Own records: Restricts users to perform actions only on the data records they have created.

2. Field Permissions: Field permissions allow for configuring permissions for each field in different actions. For example, some fields can be configured to be view-only and not editable.

#Related Documentation

[Configure Permissions]