6. Security Subsystem
CUBA includes a sophisticated security subsystem that solves common problems of enterprise applications:
The role-based access control for the data model (entity operations and attributes), UI screens and arbitrary named permissions. For example, John Doe can view documents, but cannot create, update or delete them. He also can view all document attributes except
Row-level data access control - ability to specify rights to particular entity instances. For example, John Doe can view documents that have been created in his department only.