Should I create a separate entity access rule for each module role that needs access to a specific entity?

0
Should I create a separate entity access rule for each module role that needs access to a specific entity?
asked
1 answers
0

Hi Sandra,

You don't have to, but I generally like to do so. Even if they roles are equal, it will allow you to manage very precisely which roles are allowed to see/change every specific attribute. As your project gets bigger and more complicated, seemingly similar roles might need to see different things in the application.

 

Exceptions on this are modules where you can be fairly sure that there will be set roles that will not change. For example a module, with an admin and a readonly role. In these cases it might not be necessary to make a different role for everyone.

 

In the end it comes down to the amount of flexibility you will need in the roles.

 

Hope this helps!

answered