At Sandia National Labs, the document management process for one of our internal customers requires access control based on metadata values, user role, relationship type, and workflow state. This talk will include:

• How we used a custom ItemType called a Relationship Access Rule to grant specific permissions
• How the central “Rules Engine” method consults the Relationship Access Rules
• How we used both client and server methods that are bound to RelationshipType and Relationship Item events to consult the rules engine

Sandia National Laboratories is a multimission laboratory managed and operated by NTESS under DOE NNSA contract DE-NA0003525.