Caspio applies default permissions to all tables within the given app. App authors can modify default permissions or create custom permissions to control app user access to data exposed in DataParts.
The following permissions are supported: Create, Read, Update, and Delete. For default permissions, Create, Read, Update and Delete rights can be applied to either none or all records. For Custom permissions, Create rights can be applied to either all or none of the records, whereas Read, Update and Delete rights to all, none, user's own or custom access records.
Note: Custom permissions overwrite default permissions.
Steps to edit role permissions
- From the sidebar navigation menu, select Roles.
- Hover over a role and select Open.
- In the upper left corner, select the Permissions tab.
- Select relevant options for a given permission by clicking the option arrow.
- For Default permissions, you can apply all permissions (Create, Read, Update, Delete) to either none or all records.
- For Custom permissions, you can apply:
- Create permissions to either none or all records,
- Read, Update and Delete permissions to none, all, user’s own, or custom access records.
Once you select an option, the changes are automatically saved.
- Assign users or users' groups to the role.
Only users from a directory that you select during role creation can be applied to a role.
Customizing criteria for access permissions
You can limit access permissions only to the selected records. There are two available options:
Custom access records – to create complex filters for specific data in tables. Learn more.
User’s own records – to restrict access only to the owners of the records. Learn more.