Customers data modelling

Permissions are added to groups, and persons get the same permissions that are set for the groups they are assigned to. Persons can be added to organizations and can have different roles.

Person

Persons can have configurable attributes and addresses. They can be added to groups and organizations. If they are part of an organization a person may have a role in that organization.

• SecurityContextService.Everyone is a special user with no permissions (anonymous access).
• SecurityContextService.System is a special user who has system access permissions (all permissions).

Group

Groups can be static or dynamic. A static group has a fixed group of persons assigned to it, while a dynamic group gets its members dynamically through filter conditions.

Organization

Organizations can have configurable attributes, addresses and roles.