This interface provides authorization – checking user access rights to different objects in the system.
Most of the interface methods delegate to the corresponding methods of current UserSession
object, but before this they search for an original meta-class of the entity, which is important for projects
with
extensions. Besides methods duplicating UserSession
functionality,
this interface contains isEntityAttrReadPermitted()
and isEntityAttrUpdatePermitted()
methods that check attribute path availability with respect to availability of all attributes and entities
included in the path.
The Security
interface is recommended to use everywhere instead of direct calling of
UserSession
's is...Permitted()
methods.
See more in Section 4.2.10, “User Authentication ”.