Table of contents
tells you more about the system is secured
What components form Atollon system security?
The system itself is secured by its three-tier design. Client application is allowed to send only XML request, which is executed on the server side, where user access rights are examined. In on-line mode, no data are stored on the client side.
Application Security
The system has integrated tree structure, similar to MS Active Directory or Novell eDirectory, using which application administrators can manage system rights.
The system knows USER, GROUP and ROLE access rights.
The main rights principles are:
- rights are inherited in the tree
- root user has all system rights
- rights are assigned to items through ACL (Access Control List)
Allowed ACL rights are: NEW, LIST, VIEW, EDIT, DELETE, RIGHTS, ADMIN, NOT INHERITED
Data Transfer Security
The MS Windows client data transfer is secured using 128-bit SSL.
Atollon Lagoon is secured using HTTPS protocol (browser-integrated encryption).
Authentication
Users are authenticated using username and password.
Backup
In SaaS mode, we do regular backup of all databases and binary data (documents) every day. The backup is stored on independent servers, physically distant from our servers infrastructure.
Comments