Release 10.1A: OpenEdge Development:
Progress Dynamics Administration

Choosing a security model: grant versus revoke

Your first step in setting up security for your application is to decide whether to implement a grant or revoke model. As a general rule, if you want to hide a large part of your application system from most of your users, use a grant model. Conversely, if most of your users must see most of your application, use a revoke model (the default). However, as each application differs, you must decide what makes sense for your particular application. Consider the following implications of your decision:

Once you have set up security against a model, you cannot change the model unless you first delete the existing security setup (by clearing all security allocations in your application). Make sure you decide on the correct model before you start to implement security.
The security model you choose applies to your entire application. As administrator, you can implement either a grant strategy or a revoke strategy for your application, but you cannot combine both in the same application.

The following sections provide more details about each type of security model.