Identifiers Type
This feature allows access to identifiers of a relation or a provider to be restricted. The identifiers can only be accessed by users with a role that includes the restriction. The identifier types can be of various types such as the social security number, drivers license number etc.
When a user views a relation or a provider with the identifiers that they are not allowed to see, the identifiers will be concealed.
-
Identifiers
When a user searches for the protected identifiers that they are not allowed to see, the identifier will not be returned at all.
- Example
-
User Bob is granted access restriction SECRET_IDENTIFIER. No access restrictions have been granted to user Pete. The following table shows which contact details they can access.
Person | Identifier | Identifier Type | Identifier Access Restriction | Accessible by Bob? | Accessible by Pete? |
---|---|---|---|---|---|
Mary |
123-456-789 |
Social Security Number |
SECRET_IDENTIFIER |
yes |
no |
Jane |
289-68c-180D |
Pan Card Number |
empty |
yes |
yes |
Susan |
****-****-890E |
Driver’s License Number |
TOP_SECRET_IDENTIFIER |
no |
no |
- Inference Prevention
-
When searching on an object with a restricted identifier as search criterion, the object is not returned when the user doesn’t have the appropriate access restrictions for that identifier type.
- Related Entities
-
Not applicable.