/configure-access-rights

What problem does it solve?

It prevents access-rights misconfiguration in Directum RX by guiding you to correctly set roles, assign per-type and per-instance grants, and align AccessRightsMode in entity metadata.

Core Features & Use Cases

• Role setup with stable GUIDs: Define role identifiers once (e.g., in ModuleConstants) and create localized, idempotent roles during module initialization.
• Per-type and per-instance permission grants: Grant rights to whole entity types (DefaultAccessRightsTypes) and additionally grant rights at runtime for specific instances when required.
• Correct metadata configuration: Set AccessRightsMode in .mtd to Type, Instance, or Both so the platform enforces the expected authorization model.
• Dynamic authorization via ComputedRoles: Use computed roles to produce recipients based on entity data (e.g., experts for a contract).
• Inheritance for linked entities: Apply leading-entity inheritance using EntitySecureLinks so child objects reuse the parent’s authorization scope.
• Use Cases: onboarding modules with consistent CRM security, restricting document kinds, controlling changes on specific deals/tasks, and implementing department-based or assignment-based authorization rules.

Quick Start

Ask the AI to produce a complete ModuleInitializer + GrantRights plan for your Directum RX entity, including the role GUID strategy, the per-type grants, and the required AccessRightsMode value for your .mtd based on whether rights must be enforced on type, instance, or both.