Permissions

The permissions interface allows you to configure core system-level permissions.

There is a separate view for system, Corteza Messaging, and Corteza Low Code.

These rules apply to automation scripts. If a user is not allowed to access Low Code, the triggered automation script is also not allowed to access Low Code.

Corteza system

System service permissions

Allow access to administration: Determines if the role is allowed to access the administration panel (the web application being defined here),
Grant permission on system service: Determines if the role is allowed to grant permissions on system service,
Access all settings: Determines if the role is allowed to access any setting defined under the system,
Manage all settings: Determines if the role is allowed to manage and edit any setting defined under the system,
Create new organization: Determines if the role is allowed to create a new organization.
Create new role: Determines if the role is allowed to create a new role.
Create new user: Determines if the role is allowed to create a new user.
Create new application: Determines if the role is allowed to create a new application.
Allow reminder assignment: Determines if the role is allowed to assign reminders to other users.

Organizations

Access to all organizations: Determines if the role is allowed to access any organization.

Applications

Access any application: Determines if the role is allowed to access any application.
Update any application: Determines if the role is allowed to update any application.
Delete any application: Determines if the role is allowed to delete any application.

Users

Read any user: Determines if the role is allowed to access any user.
Update any user: Determines if the role is allowed to update any user.
Delete any user: Determines if the role is allowed to delete any user.
Suspend any user: Determines if the role is allowed to suspend any user.
Unsuspend any user: Determines if the role is allowed to unsuspend any user.
Show email details: Determines if the role is allowed to see the email address of any user.
Show name details: Determines if the role is allowed to see the name of any user.
Impersonate any user: Determines if the role is allowed to impersonate any users.

Roles

Read any role: Determines if the role is allowed to see any role.
Update any role: Determines if the role is allowed to update any role.
Delete any role: Determines if the role is allowed to delete any role.
Manage members for any role: Determines if the role is allowed to add/remove members from any role.

Corteza Low Code

Service permissions

If a role doesn’t have access to the Corteza Low Code, they will also not be able to access any application defined as a Corteza Low Code namespace.

Access to compose: Determines if the role is allowed to access Corteza Low Code.
Create namespaces: Determines if the role is allowed to create namespaces for Corteza Low Code.
Grant permissions on compose service: Determines if the role is allowed to manage permissions for Corteza Low Code.
Access all settings: Determines if the role is allowed to read any setting for Corteza Low Code.
Manage all settings: Determines if the role is allowed to manage any setting for Corteza Low Code.

Namespaces permissions

Access any namespace: Determines if the role is allowed to access any Corteza Low Code namespace.
Update any namespace: Determines if the role is allowed to update any Corteza Low Code namespace.
Delete any namespace: Determines if the role is allowed to delete any Corteza Low Code namespace.
Manage any namespace: Determines if the role is allowed to manage any Corteza Low Code namespace.
Create modules under any namespace: Determines if the role is allowed to create modules for any Corteza Low Code namespace.
Create charts under any namespace: Determines if the role is allowed to create charts for any Corteza Low Code namespace.
Create pages under any namespace: Determines if the role is allowed to create pages for any Corteza Low Code namespace.

Modules permissions

Read any module: Determines if the role is allowed to access any Corteza Low Code module.
Update any module: Determines if the role is allowed to update any Corteza Low Code module.
Delete any module: Determines if the role is allowed to delete any Corteza Low Code module.
Create record under any module: Determines if the role is allowed to create records for any Corteza Low Code module.
Read records under any module: Determines if the role is allowed to access records for any Corteza Low Code module.
Update records under any module: Determines if the role is allowed to update records for any Corteza Low Code module.
Delete records under any module: Determines if the role is allowed to delete records for any Corteza Low Code module.

Module fields permissions

Read any module field: Determines if the role is allowed to see any Corteza Low Code module field.
Update any module field: Determines if the role is allowed to update any Corteza Low Code module field.

Charts permissions

Read any chart: Determines if the role is allowed to see any Corteza Low Code chart.
Update any chart: Determines if the role is allowed to update any Corteza Low Code chart.
Delete any chart: Determines if the role is allowed to delete any Corteza Low Code chart.

Pages permissions

Read any page: Determines if the role is allowed to see any Corteza Low Code page.
Update any page: Determines if the role is allowed to update any Corteza Low Code page.
Delete any page: Determines if the role is allowed to delete any Corteza Low Code page.

Corteza Messaging

Service permissions

Access to messaging: Determines if the role is allowed to access Corteza Messaging.
Grant permissions on messaging service: Determines if the role is allowed to grant permissions on Corteza Messaging.
Access all settings: Determines if the role is allowed to access any Corteza Messaging setting.
Manage all settings: Determines if the role is allowed to manage any Corteza Messaging setting.
Create public channels: Determines if the role is allowed to create public Corteza Messaging channels.
Create private channels: Determines if the role is allowed to create private Corteza Messaging channels.
Create direct messages and group channels: Determines if the role is allowed to create direct Corteza Messaging channels to a specific user or a set of.

Channels permissions

Update any channel: Determines if the role is allowed to update any Corteza Messaging channel.
View any channel: Determines if the role is allowed to access any Corteza Messaging channel.
Join any channel: Determines if the role is allowed to join any Corteza Messaging channel.
Leave any channel: Determines if the role is allowed to leave any Corteza Messaging channel.
Delete any channel: Determines if the role is allowed to delete any Corteza Messaging channel.
Undelete any channel: Determines if the role is allowed to undelete (restore) any Corteza Messaging channel.
Archive any channel: Determines if the role is allowed to archive any Corteza Messaging channel.
Unarchive any channel: Determines if the role is allowed to unarchive any Corteza Messaging channel.
Manage members on any channel: Determines if the role is allowed to add or remove any Corteza Messaging channel members.
Manage attachments on any channel: Determines if the role is allowed to manage attachments of any Corteza Messaging channel.
Message sending on any channel: Determines if the role is allowed to send massages to any Corteza Messaging channel.
Reply to messages on any channel: Determines if the role is allowed to reply (create threads) to any Corteza Messaging channel message.
Embedding in messages on any channel: Determines if the role is allowed to embed external resources to any Corteza Messaging channel message.
File attaching on any channel: Determines if the role is allowed to upload files (attachments) to any Corteza Messaging channel.
Update own messages on any channel: Determines if the role is allowed to update own messages of any Corteza Messaging channel.
Update any message on any channel: Determines if the role is allowed to update any message or any Corteza Messaging channel.
Delete own messages on any channel: Determines if the role is allowed to delete own messages of any Corteza Messaging channel.
Delete any message on any channel: Determines if the role is allowed to delete any message of any Corteza Messaging channel.
React on messages on any channel: Determines if the role is allowed to add reactions to any message of any Corteza Messaging channel.