Document architecture with fragment-driven role-based access controls
A document production system may construct a document from fragments based on a theme associated with the document. The theme may contain section(s), each section having an access control list (ACL) associated therewith. The ACL may specify role-based user group(s) and permission(s) for the role-based user group(s). The system may evaluate rules applicable to the document. At least one rule may pertain to the ACL(s). The evaluation may include, at least in part, utilizing user login information received over a network from a client device. In constructing the document, the system may assemble the document in accordance with the rules and utilizing the fragments and meta information that describes the document. The system may render the document thus assembled utilizing the ACL, generate a view of the document, and communicate the view of the document over the network to the client device for presentation on the client device.
1. A method for document production, the method comprising:
responsive to receiving login information and a request for producing a document from a client device, retrieving, by a server computer from a repository, metadata for the document and formatted fragments associated with a theme referenced by the request, the theme having a section-level access control list (ACL) for a user group;
assembling, by the server computer, the document using the metadata for the document and the formatted fragments associated with the theme, wherein the document assembled from the formatted fragments comprises a plurality of sections and wherein the assembling comprises determining a version of the document based at least on whether a user of the user group is permitted to view or edit a section of the plurality of sections of the document per the section-level ACL for the user group;
generating, by the server computer, a view containing the version of the document; and
sending, by the server computer responsive to the request, the view to the client device for presentation on the client device.
2. The method according to claim 1 , wherein the section-level ACL applies to a single fragment or multiple fragments from which the section of the document is constructed.
3. The method according to claim 2 , further comprising:
receiving an indication that a change is made to the section-level ACL; and
propagating the change to the section-level ACL across multiple documents constructed with the single fragment or the multiple fragments, the multiple documents including the document.
4. The method according to claim 1 , wherein each of the plurality of sections is associated with a role-based ACL, and wherein the role-based ACL applies to a single fragment or multiple fragments.
5. The method according to claim 1 , wherein the user is permitted to edit the section per the section-level ACL for the user group, the method further comprising:
receiving an indicating that the section of the document is modified;
dynamically updating the section of the document; and
rendering the document in real time.
6. The method according to claim 5 , wherein the indication indicates that a new fragment is inserted into the section of the document or that an existing fragment is deleted from the section of the document.
7. The method according to claim 5 , wherein the dynamic updating comprises dynamically rearranging a plurality of formatted fragments in the section of the document.
8. A system for document production, the system comprising:
a processor;
a non-transitory computer-readable medium; and
instructions stored on the non-transitory computer-readable medium and translatable by the processor for:
responsive to receiving login information and a request for producing a document from a client device, retrieving, from a repository, metadata for the document and formatted fragments associated with a theme referenced by the request, the theme having a section-level access control list (ACL) for a user group;
assembling the document using the metadata for the document and the formatted fragments associated with the theme, wherein the document assembled from the formatted fragments comprises a plurality of sections and wherein the assembling comprises determining a version of the document based at least on whether a user of the user group is permitted to view or edit a section of the plurality of sections of the document per the section-level ACL for the user group;
generating a view containing the version of the document; and
sending, responsive to the request, the view to the client device for presentation on the client device.
9. The system of claim 8 , wherein the section-level ACL applies to a single fragment or multiple fragments from which the section of the document is constructed.
10. The system of claim 9 , wherein the instructions are further translatable by the processor for:
receiving an indication that a change is made to the section-level ACL; and
propagating the change to the section-level ACL across multiple documents constructed with the single fragment or the multiple fragments, the multiple documents including the document.
11. The system of claim 8 , wherein each of the plurality of sections is associated with a role-based ACL, and wherein the role-based ACL applies to a single fragment or multiple fragments.
12. The system of claim 8 , wherein the user is permitted to edit the section per the section-level ACL for the user group and wherein the instructions are further translatable by the processor for:
receiving an indicating that the section of the document is modified;
dynamically updating the section of the document; and
rendering the document in real time.
13. The system of claim 12 , wherein the indication indicates that a new fragment is inserted into the section of the document or that an existing fragment is deleted from the section of the document.
14. The system of claim 12 , wherein the dynamic updating comprises dynamically rearranging a plurality of formatted fragments in the section of the document.
15. A computer program product for document production, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:
responsive to receiving login information and a request for producing a document from a client device, retrieving, from a repository, metadata for the document and formatted fragments associated with a theme referenced by the request, the theme having a section-level access control list (ACL) for a user group;
assembling the document using the metadata for the document and the formatted fragments associated with the theme, wherein the document assembled from the formatted fragments comprises a plurality of sections and wherein the assembling comprises determining a version of the document based at least on whether a user of the user group is permitted to view or edit a section of the plurality of sections of the document per the section-level ACL for the user group;
generating a view containing the version of the document; and
sending, responsive to the request, the view to the client device for presentation on the client device.
16. The computer program product of claim 15 , wherein the section-level ACL applies to a single fragment or multiple fragments from which the section of the document is constructed.
17. The computer program product of claim 16 , wherein the instructions are further translatable by the processor for:
receiving an indication that a change is made to the section-level ACL; and
propagating the change to the section-level ACL across multiple documents constructed with the single fragment or the multiple fragments, the multiple documents including the document.
18. The computer program product of claim 15 , wherein each of the plurality of sections is associated with a role-based ACL, and wherein the role-based ACL applies to a single fragment or multiple fragments.
19. The computer program product of claim 15 , wherein the user is permitted to edit the section per the section-level ACL for the user group and wherein the instructions are further translatable by the processor for:
receiving an indicating that the section of the document is modified;
dynamically updating the section of the document; and
rendering the document in real time.
20. The computer program product of claim 19 , wherein the indication indicates that a new fragment is inserted into the section of the document or that an existing fragment is deleted from the section of the document and wherein the dynamic updating comprises dynamically rearranging a plurality of formatted fragments in the section of the document.