Precise rights.
At every level
of the interface.
At Archie, fine-grained permissions had to be introduced into an existing application. Visible elements could vary depending on the user or their group, from an entire page down to a single button.
I developed the computation logic on the front-end from the data returned by the back-end, then refactored the interface to apply these permissions at its different levels.
Permission data ↗ Computation ↗ Display
Design an algorithmic utility function to compute permissions from the information sent by the back-end.
Apply granularity to pages, blocks and actions, including when an element itself sits inside a conditional container.
Refactor the various parts of the application to integrate this permission logic.
Page.
Block.
Action.
The work covered the entire front-end chain: computing permissions, applying them and controlling which interface elements are visible.
Front-end display control complements the authorization checks performed on the server.
Front-end is also
the logic behind the interface.