Roles and Permissions

The service authorizes every request against the roles of the key owner and the permissions of the key. Babel Desktop follows the same rules in its interface. It hides the views the roles cannot read. An action the key has no permission for stays visible but disabled, with the reason. The service still makes the final decision.

The key permissions map to operations: Read for browsing, Create for new records, Write for edits (including revoking a license) and Delete for deletions.