Access control

Edit online

The dynamic URL example results in several access controls.

The following table lists the access controls resulting from application of the preceding information:
Table 1. Access controls for each object space entry
Object space entry Access
/ows/tr/browse

unauthenticated     Tr
any_authenticated     Tr
/ows/tr/auth

unauthenticated     -
any_other     -
group TKStaff     Tr
group Customer     PTr
/ows/admin/forall

unauthenticated     -
any_other     -
group Staff     Tr
/ows/admin/auth

unauthenticated     -
any_other     -
group AdminStaff     Tr

Customers and TKStaff have the same privileges on the booking and travel plan maintenance objects, except that the customers must encrypt information (privacy permission) to give them further security when submitting sensitive data (such as credit card information) across the untrusted Internet.