{"id":1657,"date":"2024-05-13T16:46:40","date_gmt":"2024-05-13T16:46:40","guid":{"rendered":"https:\/\/structr.com\/security-access-control\/"},"modified":"2024-05-16T14:07:07","modified_gmt":"2024-05-16T14:07:07","slug":"security-access-control","status":"publish","type":"page","link":"https:\/\/structr.com\/en\/product\/features\/security-access-control\/","title":{"rendered":"Security & Access Control"},"content":{"rendered":"

[vc_section row_bg_image_behavior=”bg–image–beh-fixed” row_bg_image_position=”bg–image–pos-tc” row_bg_image_repeat=”bg–image-no-repeat” row_bg_image=”1878″][vc_row row_padding=””][vc_column]

Maximum security on three levels<\/div>

Security & Access Control<\/h1><\/div>

Create maximum security through customized control for each access path and pattern by defining users, groups, roles, type and schema-dependent permissions as well as individual access rights at object level.<\/p><\/div>

\"\"<\/div><\/div><\/div>[\/vc_column][\/vc_row][\/vc_section][vc_section row_padding=”vpt-7 vpb-7″][vc_row row_padding=”custom” row_padding_bottom=”vpb-7″][vc_column width=”5\/6″ col_sticky=”” offset=”vc_col-md-offset-2 vc_col-md-8 vc_col-sm-offset-1″]
\"\"<\/div><\/div><\/div>

Comprehensive Security and Access Control<\/h2><\/div><\/div>[vc_column_text]<\/p>\n

Ensure maximum security with Structr’s customizable access control system. Define users, groups, roles, and permissions at type, schema, and object levels for tailored protection. Our system supports hierarchical group structures, LDAP synchronization, and various authentication protocols. Benefit from fast rights resolution with graph database technology, ensuring efficient and secure access management for complex enterprise needs.<\/strong><\/p>\n

[\/vc_column_text]

Get in touch<\/a><\/div><\/div>[\/vc_column][\/vc_row][vc_row row_padding=”custom” row_padding_bottom=”vpb-5″][vc_column width=”2\/3″ col_sticky=”” offset=”vc_col-lg-6 vc_col-md-7 vc_col-sm-offset-1″]

<\/span>Security & Access Control<\/p>

Users, Groups and Roles<\/h2><\/div><\/div>[vc_column_text]In order to make the content and functions of Structr applications accessible to people with different tasks and privileges, individual users can be created or synchronized from directory services.<\/p>\n

The group memberships that can be defined via the admin user interface or the directory data allow authorizations to be assigned based on roles, as multiple memberships and groups with any level of nesting are also possible.[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_padding=”custom” row_padding_bottom=”vpb-10″][vc_column width=”7\/12″ col_sticky=””][vc_single_image image=”1639″ img_size=”large” image_shadow=”shadow-lg”][\/vc_column][vc_column width=”5\/12″ col_sticky=”” offset=”vc_col-lg-offset-1 vc_col-lg-4″]

<\/div>

Advantages<\/p>

  • Users and hierarchical group structures
    <\/li>
  • Multiple membership and any nesting depth
    <\/li>
  • Synchronization with LDAP directory services possible
    <\/li>
  • Authentication via OAuth, web tokens and other protocols
    <\/li>
  • SHA-512-based salted password hashes<\/li><\/ul><\/div><\/div>[\/vc_column][\/vc_row][vc_row content_placement=”middle” row_padding=”custom” row_padding_bottom=”vpb-10″][vc_column width=”7\/12″ col_sticky=”” col_pp_sm=”vc_col-sm-push-5″][vc_row_inner row_padding=”custom” row_padding_bottom=”vpb-5″][vc_column_inner width=”5\/6″ offset=”vc_col-sm-offset-2″]

    <\/span>Security & Access Control<\/p>

    Type and schema-based authorizations<\/h2><\/div><\/div>[vc_column_text]In order to manage permissions for the elements to be accessed more efficiently, patterns can be defined in Structr, e.g. by using the schema topology or grouping objects based on their type.<\/p>\n

    These types of authorizations are compiled when changes are made and resolved extremely quickly at runtime without the need for additional database calls.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_single_image image=”1639″ img_size=”large” image_shadow=”shadow-lg”][\/vc_column][vc_column width=”5\/12″ col_sticky=”” col_pp_sm=”vc_col-sm-pull-7″ col_pp_lg=”vc_col-lg-pull-8″ offset=”vc_col-lg-offset-1 vc_col-lg-4″]

    <\/div>

    Advantages<\/p>

    • Grouping of similar objects by type and schema topology
      <\/li>
    • Assignment via easy-to-use tools in the admin interface
      <\/li>
    • Programmatic authorization assignment possible via APIs
      <\/li>
    • Extremely fast rights resolution through the use of compiled code<\/li><\/ul><\/div><\/div>[\/vc_column][\/vc_row][vc_row content_placement=”middle” row_padding=”custom” row_padding_bottom=”vpb-5″][vc_column width=”7\/12″ col_sticky=””][vc_row_inner row_padding=”custom” row_padding_bottom=”vpb-5″][vc_column_inner width=”5\/6″ offset=”vc_col-sm-offset-2″]

      <\/span>Security & Access Control<\/p>

      Individual access rights at object level<\/h2><\/div><\/div>[vc_column_text]Finally, access to individual objects can also be granted or blocked for users and groups. With this and in combination with the functions listed above, almost all conceivable security concepts can be implemented, which is essential for sophisticated enterprise solutions.<\/p>\n

      The resolution of the defined rights at runtime is usually very detrimental to performance and takes longer the more and the more complex the authorization patterns defined. By using a graph database for rights resolution, Structr achieves only a linearly increasing slowdown, while other systems experience an exponential decrease in resolution speed, which often makes complex use cases impossible.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_single_image image=”1639″ img_size=”large” image_shadow=”shadow-lg”][\/vc_column][vc_column width=”5\/12″ col_sticky=”” offset=”vc_col-lg-offset-1 vc_col-lg-4″]

      <\/div>

      Advantages<\/p>

      • Individual access protection down to the level of individual objects
        <\/li>
      • Uncompromising use of authorizations possible thanks to high resolution speed
        <\/li>
      • No exponential, but at most linearly increasing effort for authorization resolution
        <\/li>
      • Even high security requirements with complex authorizations can be implemented<\/li><\/ul><\/div><\/div>[\/vc_column][\/vc_row][\/vc_section][vc_row row_padding=”” row_maxwidth=””][vc_column]

        <\/span>Get in touch with Structr<\/p>

        We are interested in the use of Structr<\/p><\/div><\/div>