Configurable elements

This page provides an overview of the configurable elements within Access Control in Valtimo.

In Access Control, policies can be defined for specific elements to manage user access and permissions precisely. These policies can be tailored with conditions, allowing for detailed and customized access configurations.

Each configurable element offers a set of actions that can be adjusted to fit your access needs. While not all actions are available for every element, each element provides a relevant subset of actions that logically apply to its function, ensuring that your access settings are both efficient and meaningful.

Elements configurable with Access control

Below the full list of elements within Valtimo that can and need to be configured in Access Control. Per element a list of configurable actions is documented and an example of the configuration is added. The available actions per element define what can be configured for that element.

Feature	Resource name	Resource type	Module
Cases		com.ritense.case_.domain.definition.CaseDefinition
	Document	com.ritense.document.domain.impl.JsonSchemaDocument	Document
	Document definition	com.ritense.document.domain.impl.JsonSchemaDocumentDefinition	Document
	Document snapshot	com.ritense.document.domain.impl.snapshot.JsonSchemaDocumentSnapshot	Document
	Notes	com.ritense.note.domain.Note	Notes
	Search fields	com.ritense.document.domain.impl.searchfield.SearchField	Document
	Tabs	com.ritense.case.domain.CaseTab	CaseTab
	Widgets	com.ritense.case_.domain.tab.CaseWidget
Dashboard		com.ritense.dashboard.domain.Dashboard
Process	Execution	com.ritense.valtimo.operaton.domain.OperatonExecution	Core
	Definition	com.ritense.valtimo.operaton.domain.OperatonProcessDefinition	Core
Tasks	Tasks	com.ritense.valtimo.operaton.domain.OperatonTask	Core
	Identity links	com.ritense.valtimo.operaton.domain.OperatonIdentityLink	Core
ZGW	Documents	com.ritense.resource.authorization.ResourcePermission	Resource

Actions configurable with Access control

Action	Function	Examples
Assign	Gives permission to assign that element to someone	Case or Task
Assignable	Makes users selectable when the element is assigned	Case or Task
Create	Enables users to create that element	Case or Case note
Claim	Enables users to claim the element	Case or Task
Delete	Enables users to delete the element	Case or Case note
Modify	Enables users to modify the elements details	Case or Case note
View	Gives permission to view the elements details	Case or Task
View-list	Gives permission to view the element in a list	Case, Task, Case note

Nesting actions

Available since Valtimo 12.17.0

The different actions for a configuration can be nested. This makes it easier to set up the configuration and keep conditions the same between different permissions.

Before Valtimo 12.17.0:

        {
            "resourceType": "com.ritense.document.domain.impl.JsonSchemaDocument",
            "action": "view_list",
            "roleKey": "ROLE_USER",
            "conditions": [
                {
                    "type": "field",
                    "field": "assigneeId",
                    "operator": "==",
                    "value": "${currentUserId}"
                }
            ]
        },
        {
            "resourceType": "com.ritense.document.domain.impl.JsonSchemaDocument",
            "action": "view",
            "roleKey": "ROLE_USER",
            "conditions": [
                {
                    "type": "field",
                    "field": "assigneeId",
                    "operator": "==",
                    "value": "${currentUserId}"
                }
            ]
        },

Since Valtimo 12.17.0:

        {
            "resourceType": "com.ritense.document.domain.impl.JsonSchemaDocument",
            "actions": [
                "view_list",
                "view",
            ],
            "roleKey": "ROLE_USER",
            "conditions": [
                {
                    "type": "field",
                    "field": "assigneeId",
                    "operator": "==",
                    "value": "${currentUserId}"
                }
            ]
        },