Roles and Rights in NoCode-X

Title	Description	Hide Table of Contents
Roles and Rights in NoCode-X	A guide to understanding and implementing roles and rights in NoCode-X applications.	false

Understanding Roles and Rights in NoCode-X

In NoCode-X, managing Roles and Rights is crucial for ensuring that users have the appropriate access to perform their tasks effectively. This guide will help you understand the reasoning behind defining roles and rights, as well as the steps to implement them.

Attributes of Rights

Rights are technical privileges assigned to users while developing applications. They determine what actions users can perform within the NoCode-X environment.

• What it is and does: Rights control access to various functionalities and components in NoCode-X.
• Each right needs:
  • Name: A clear and concise identifier for the right.
  • Description: A brief explanation of what the right allows the user to do.

Role Definition

Roles represent the functional responsibilities assigned to users within the application. They define what services or applications users can access and what actions they can perform.

• What it is and does: Roles are used to assign specific service or application responsibilities to users.
• Each role has:
  • Go to Groups: Access the Groups section by pressing Alt + G.
  • Name: A clear identifier for the role.
  • Description: A brief explanation of the role's purpose and responsibilities.

Plan of Approach

Functional analysis

Step 1: Define the functional roles
Identify the key roles needed for your application. For example, in a webshop, you might have:

• Customer: Can search for products, make purchases, and track orders.
• Webshop Manager: Manages products, processes orders, and oversees operations.
• Accountant: Monitors payments and financial transactions.

Step 2: Define the technical privileges
Determine the specific rights needed for each role to perform their functions effectively.

Technical implementation

Step 3: Create the rights

• Navigate to the ribbon on the left side of the NoCode-X interface.
• Use the "Create Rights" option to define new rights.

Step 4: Create the roles and assign the rights

• Go to Groups by pressing Alt + G.
• Drag and drop the rights that need to be linked to the respective roles in the role management section.

Example Configuration Tables

Groups and Rights

Role	Rights
Customer	SEARCH_PRODUCTS
	CREATE_ORDER
	TRACK_ORDER
Webshop Manager	MANAGE_PRODUCTS
	PROCESS_ORDERS
	VIEW_REPORTS
Accountant	MONITOR_PAYMENTS
	GENERATE_REPORTS

Rights and Where They Are Assigned

Right	Assigned To
SEARCH_PRODUCTS	ProductSearch.template
	ProductList.api
CREATE_ORDER	Checkout.template
	OrderProcessing.api
TRACK_ORDER	OrderTracking.template
	OrderHistory.api
MANAGE_PRODUCTS	ProductManagement.template
	AdminDashboard.api
PROCESS_ORDERS	OrderProcessing.template
	OrderManagement.api
MONITOR_PAYMENTS	PaymentGateway.api
	FinancialDashboard.template
GENERATE_REPORTS	Reporting.template
	FinancialReports.api

Compliance and User Understanding

For compliance reasons and user understanding, it is essential to have your roles and responsibilities clearly defined in line with the functionalities linked to the different users. This is key to identify your user personas and their expected functionalities. These should be worded in user stories for everyone's good understanding.

User Stories

Customer Stories

• As a Customer, I want to:
  • Search for products so that I can find items I want to purchase.
  • Create an order so that I can buy products easily.
  • Track my order so that I can know when it will arrive.

Webshop Manager Stories

• As a Webshop Manager, I want to:
  • Manage products so that I can keep the inventory updated.
  • Process orders so that I can ensure timely delivery to customers.
  • View reports so that I can analyze sales performance.

Accountant Stories

• As an Accountant, I want to:
  • Monitor payments so that I can ensure all transactions are processed correctly.
  • Generate reports so that I can provide financial insights to the management.

Conclusion

By clearly defining roles and rights in NoCode-X, you can establish a structured access management system that enhances security and ensures users can perform their tasks efficiently. Following this guide will help you implement best practices for identity and access management in your applications.