Restrictions Overview - OpenSlides/OpenSlides GitHub Wiki

Models are restricted by the autoupdate-service before sending them to the client. The models are individually restricted based on the requesting user.

The id field of a model must be coupled to the basic see property. This allows to query the id field to decide, if a requesting client is allowed to see the object.

To see a relation-field, the user needs the permission for both sides of the relation. For relation-list-fields and generic-relation-list-fields, the restricter removes entries from the list, that the user can not see. For relation-fields and generic-relation-fields, the restricter removes the field, if the user can not see the corresponding field.

A user with the organization management level superadmin can see most fields. If the superadmin can not see a field, it is explicitly documented.

Each field of a collection has a collection mode. This mode defines which requirements a user has to satisfy to see the field. The collection mode of a field is defined in the models.yml. An overview of all fields that share the same collection mode can be found in this autogenerated file. The requirements for each collection mode are defined in the corresponding file of this folder.