Smallworld Authorisation

_{Yes it is spelled with an 's' here because it is spelled with an 's' in all the documentation….}

Record Based Authorisation

The core Authorisation system allows you to set up record based authorisations. To implment this you go to groups page, and under the collections tab, you can select "advanced" on the right side for each of the tables you want to only display certain records to certain users. Note this predicate requires a test that is done on a field, so we created a logical field. This is very cool, but does come with a performance price…..

+ Show Performance Information

When I did some testing for Genicom these were the results that we found…

Average seek time for a normal record was 0.0155 milliseconds. The average seek time when we had authorisation turned on was 0.5208 milliseconds. The following was the code that was used as the test of whether a user would be allowed to view the record. We used the internal storage data and we cached the authorisation group information, so the test itself was pretty quick.

_pragma(classify_level=advanced, topic={gcg,auth})
_method mit_hub.user!owner_viewable?
    ## Parameters  : none
    ## Returns     : boolean
    ## Function    : determines if the stored owner 
    ## number is part of the groups this user belongs to
    ## Methodology : 
    #---------------- HISTORY ---------------------
    # (04/30/2012 - Mark Field, FCSI): Created.
    #----------------------------------------------
    _local int << _self.dsint!user!owner
    _if int _is 0
    _then
        _return _true 
    _endif
    _return  gcg_cache.gcg_owner_numbers.includes?(int)
_endmethod