{"id":154,"date":"2006-12-06T08:41:02","date_gmt":"2006-12-06T16:41:02","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=154"},"modified":"2006-12-06T08:41:02","modified_gmt":"2006-12-06T16:41:02","slug":"ecm-document-level-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/ecm-document-level-security\/","title":{"rendered":"ECM: Document Level Security"},"content":{"rendered":"

The Tam Tam Blog mentioned<\/a> an interesting discussion of Document Level Security in discussion by Mark Bennet at New Idea Engineering<\/a>.<\/p>\n

The search result of a document search\u00a0needs to account for\u00a0security levels assigned by ACLs to documents in the repository.\u00a0 A given user may be limited to access and search across certain documents.<\/p>\n

Mark distinguishes between two approaches for document search when security is applied:<\/p>\n

Early-Binding Security.<\/strong>\u00a0 In this scenario, the query to the back-end repository incorporates ACL permission conditions into the query.\u00a0 This efficiently only returns a set of documents appropriate for that user to see.\u00a0 No post-processing of the data prior to display to the user is required.<\/p>\n

Late-Binding Security.<\/strong>\u00a0 In this scenario, after the user query is made against the repository, the returned result set is further post-processed to identify only those documents that the user has permission to see.\u00a0 This can obviously be a very time-consuming operation, depending on the number of hits in the query.\u00a0 And if not properly handled, can also cause problems in stating the total number of document hits and how paging between the document results is handled.<\/p>\n

It’s a good article by Mark describing some of the low level considerations for how to construct the internals of a document\/content repository.\u00a0 I was actually surprised to see in Mark’s list some companies that are not using “Early Binding”.\u00a0 The Formtek applications and SDK have always only exclusively used Early Binding.<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

The Tam Tam Blog mentioned an interesting discussion of Document Level Security in discussion by Mark Bennet at New Idea Engineering. The search result of a document search\u00a0needs to account for\u00a0security levels assigned by ACLs to documents in the repository.\u00a0…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-154","post","type-post","status-publish","format-standard","hentry","category-content-management"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=154"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/154\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}