Security

Reference page for Servoy Cloud Application Security

Overview

Servoy Cloud supports both authentication services and authorization using role-based access control (RBAC).

Application Security displays a table view of all permissions defined for an application, allowing you to create or delete permissions.

Permission types

Permissions in Servoy Cloud are of two types, each with different characteristics and management options:

Source Permissions

• Definition: These permissions are defined in Servoy Developer and are saved during the build time of a job.

• Scope: Source permissions are created for all applications within a workspace.

• Management: Source permissions cannot be deleted from the Cloud Control Center.

Servoy Cloud Permissions

• Definition: These permissions are created directly from the Cloud Control Center Application Security view.

• Scope: Servoy Cloud permissions are specific to a single application.

• Management: Unlike source permissions, Servoy Cloud permissions can be deleted from the Application Security view in the Cloud Control Center.

Create Permission

Once created, permission details cannot be modified.

Source Permission

To create a source permission:

1. Open Servoy IDE:

2. Navigate to Users and Permissions:

   • In the Solution Explorer, locate and open Users and Permissions, which is listed below Database Servers.

3. Create a New Permission:

   • In the User/Permissions Editor, enter the desired permission name in the textbox.

   • Save the permission by clicking the New Permission button.

You have successfully created a source permission. This permission will be included in the list at build time for all applications within that workspace.

Create source permission in Servoy IDE

Servoy Cloud Permission

To create a Servoy Cloud permission for an application:

1. Open Cloud Control Center

2. Navigate to Security:

   • Go to Applications -> Security in the Servoy Cloud Control Center.

3. Create a New Permission:

   • Click the Create Permission button.

   • Define the permission details, ensuring the following requirements are met:

     • The permission name does not contain spaces.

     • The permission name is unique within the application.

4. Save Permission

You have now created a Servoy Cloud permission, which can be assigned to a Role.

Create Servoy Cloud Permission in Cloud Control Center

Delete permission

Deleting a permission is a permanent action and cannot be reverted. If you want to remove a permission from a role, see Security Roles.

If you want to permanently delete a permission and remove it from all roles, follow the instructions below.

Source permission

To delete a source permission:

1. Open Servoy IDE

2. Navigate to Users and Permissions:

   • In the Solution Explorer, locate and open Users and Permissions, listed below Database Servers.

3. Delete a Permission:

   • In the User/Permissions Editor, select the permission by clicking the checkbox next to it.

   • Remove the permission by clicking the Remove Permission(s) button.

You have successfully removed a source permission. This change will be reflected in the next build of any solutions within the workspace.

Delete source permission in Servoy IDE

Servoy Cloud Permission

Deleting a Servoy Cloud permission is permanent and will remove it from all roles it was assigned to.

To delete a Servoy Cloud permission from an application:

1. Navigate to Security:

   • Go to Applications -> Security in the Servoy Cloud Control Center.

2. Delete a Permission:

   • Click on the delete icon next to the chosen permission.
   • Confirm your intent to delete the Servoy Cloud permission.

You have successfully deleted a Servoy Cloud permission. It has been automatically removed from all the roles to which it was assigned.

Delete Servoy Cloud permission in Cloud Control Center

Use Security Permissions

To use the Application Security permissions and ensure a complete authorization flow, permissions must be assigned to roles. For role setup and more details, see Security Roles.