Role-Based Access Control
Not everyone on your team should have the keys to the kingdom. Omnismith provides an underlying Attribute-Based Access Control (ABAC) engine to ensure the right people see the right data at the right time.
Template & Attribute Scoping
Omnismith allows you to assign granular scopes across your domain. Permissions can be scoped broadly across entire templates (e.g., granting "Edit" rights to all "Server" entities) or restricted down to specific attributes.
Deny
Complete restriction. The resource doesn't even appear in search results.
View
Read-only access. Perfect for external auditors or cross-functional teams.
Edit
Can update fields and statuses, but cannot delete the core record.
Full
Complete administrative control, including record deletion and schema updates.
Row-Level Security (Access Scopes)
Omnismith supports Row-Level Security via compile-time Access Scopes. Bind conditions to your roles to restrict access to specific individual entities dynamically based on values, lists, or reference attributes (e.g., granting a user access to only the shipments assigned to them, or restricting a billing role to specific customer records).
API Security Built-In
Our RBAC doesn't just stop at the UI. Every Personal Access Token inherits the exact permissions of the user who generated it. If a developer's token is used in a script to delete a record they only have "View" access to, the API will strictly reject the request with a 403 Forbidden.