Permission packages

In addition to regular user groups, Permission packages can be used to organize permissions. Permission packages are a type of user group that only describe permissions to classes, fields and actions.

Regular user groups can be granted multiple permission packages, effectively inheriting a combination of all their permissions (for more information about multiple inheritance of user groups see this page). This allows the developer to organize their permissions in a more inspect-able way. For instance, a user group Admin may have the package Financial, which allows it to search and read invoices. Another user group Manager, may also be given the package Financial. Now, when inspecting which user groups have permission to search and read invoices, simply check which user groups have been given the package Financial.

Permission packages can also be granted to accounts. This makes it possible to grant specific users extra permissions, in addition to the permissions of their user group. For instance, the Employee user group may normally have no permissions on invoices. A single employee can be given the package Financial, so that they can also search and read invoices.

Multiple inheritance of permission packages is also possible on account level.