Document architecture with fragment-driven role based access controls
A document production system may construct a document from fragments based on a theme associated with the document. The theme may contain section(s), each section having an access control list (ACL) associated therewith. The ACL may specify role-based user group(s) and permission(s) for the role-based user group(s). The system may evaluate rules applicable to the document. At least one rule may pertain to the ACL(s). The evaluation may include, at least in part, utilizing user login information received over a network from a client device. In constructing the document, the system may assemble the document in accordance with the rules and utilizing the fragments and meta information that describes the document. The system may render the document thus assembled utilizing the ACL, generate a view of the document, and communicate the view of the document over the network to the client device for presentation on the client device.
1. A method for document production, the method comprising:
receiving, by a computer from a client device through a user interface, a request for on-demand production of a document, the request referencing a theme, the theme containing a section, the section having an access control list (ACL), the ACL specifying a permission for a user group;
retrieving, by the computer from a repository, fragments associated with the theme and meta information that describes the document;
determining, by the computer based at least on the permission specified by the ACL, whether a user on the client device has permission to view or edit the section;
assembling, by the computer, the document from the fragments associated with the theme and using the meta information that describes the document;
rendering, by the computer, the document, the rendering comprising rendering the section based at least on a result from the determining such that the user has at least a view permission for any fragment in the section;
generating, by the computer, a view containing the rendered document; and
sending, by the computer, the view to the client device for presentation on the client device.
2. The method according to claim 1 , wherein the rendering further comprises rendering the section as a view only section if the user is permitted to view, but not edit, the section.
3. The method according to claim 1 , wherein the rendering further comprises rendering the section as a user-editable section if the user is permitted to view and edit, the section.
4. The method according to claim 3 , further comprising:
receiving a change to the user-editable section; and
dynamically updating the user-editable section to reflect the change in real time.
5. The method according to claim 4 , wherein the change comprises insertion of a new fragment into the user-editable section or deletion of an existing fragment from the user-editable section.
6. The method according to claim 4 , wherein the dynamically updating comprises at least one of:
dynamically rearranging fragments;
re-rendering the document;
generating an updated view; or
displaying the updated view on the client device.
7. The method according to claim 1 , wherein the document contains multiple sections and wherein each of the multiple sections is associated with a respective ACL.
8. A system for document production, the system comprising:
a processor;
a non-transitory computer-readable medium; and
instructions stored on the non-transitory computer-readable medium and translatable by the processor for:
receiving, from a client device through a user interface, a request for on-demand production of a document, the request referencing a theme, the theme containing a section, the section having an access control list (ACL), the ACL specifying a permission for a user group;
retrieving, from a repository, fragments associated with the theme and meta information that describes the document;
determining, based at least on the permission specified by the ACL, whether a user on the client device has permission to view or edit the section;
assembling the document from the fragments associated with the theme and using the meta information that describes the document;
rendering the document, the rendering comprising rendering the section based at least on a result from the determining such that the user has at least a view permission for any fragment in the section;
generating a view containing the rendered document; and
sending the view to the client device for presentation on the client device.
9. The system of claim 8 , wherein the rendering further comprises rendering the section as a view only section if the user is permitted to view, but not edit, the section.
10. The system of claim 8 , wherein the rendering further comprises rendering the section as a user-editable section if the user is permitted to view and edit, the section.
11. The system of claim 10 , wherein the instructions are further translatable by the processor for:
receiving a change to the user-editable section; and
dynamically updating the user-editable section to reflect the change in real time.
12. The system of claim 11 , wherein the change comprises insertion of a new fragment into the user-editable section or deletion of an existing fragment from the user-editable section.
13. The system of claim 11 , wherein the dynamically updating comprises at least one of:
dynamically rearranging fragments;
re-rendering the document;
generating an updated view; or
displaying the updated view on the client device.
14. The system of claim 8 , wherein the document contains multiple sections and wherein each of the multiple sections is associated with a respective ACL.
15. A computer program product for document production, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:
receiving, from a client device through a user interface, a request for on-demand production of a document, the request referencing a theme, the theme containing a section, the section having an access control list (ACL), the ACL specifying a permission for a user group;
retrieving, from a repository, fragments associated with the theme and meta information that describes the document;
determining, based at least on the permission specified by the ACL, whether a user on the client device has permission to view or edit the section;
assembling the document from the fragments associated with the theme and using the meta information that describes the document;
rendering the document, the rendering comprising rendering the section based at least on a result from the determining such that the user has at least a view permission for any fragment in the section;
generating a view containing the rendered document; and
sending the view to the client device for presentation on the client device.
16. The computer program product of claim 15 , wherein the rendering further comprises rendering the section as a view only section if the user is permitted to view, but not edit, the section.
17. The computer program product of claim 15 , wherein the rendering further comprises rendering the section as a user-editable section if the user is permitted to view and edit, the section.
18. The computer program product of claim 17 , wherein the instructions are further translatable by the processor for:
receiving a change to the user-editable section; and
dynamically updating the user-editable section to reflect the change in real time.
19. The computer program product of claim 18 , wherein the change comprises insertion of a new fragment into the user-editable section or deletion of an existing fragment from the user-editable section.
20. The computer program product of claim 18 , wherein the dynamically updating comprises at least one of:
dynamically rearranging fragments;
re-rendering the document;
generating an updated view; or
displaying the updated view on the client device.