Difference between Personalization Rule & Access Rights

[Former Member]

Hi,

I'm new to hybris world and hence I would like to understand the exact difference between and relation between Personalization Rule & Access Rights that can be assigned to User/User Group.

Kind regards, Vipin

[Former Member · Accepted solution]

Hi Vipin,

I believe by Personalization Rule you mean SearchRestriction. Restrictions are additional filters that are applied whenever flexiblesearch query is executed. Documentation on restrictions is here.

Access Rights are used by permission services to manage access rights policy. Documentation on Access Rights - here.

You may also find useful this article which describes areas where these rules are applied.

[mohammed24 · Accepted solution]

Does personalization apply for admingroup or admin user? if yes then do we need to do any changes manually?

[Former Member · Accepted solution]

If you're talking about search restrictions then it's not, they do not apply to admin users

By convention, restrictions do not apply to admin users (that is, users who are members of the admingroup user group)

Restrictions

[tsandhu]

Restrictions - Personalization rules restrict the objects visible for a user or user group according to filter rules specified.

Examples:

     To restrict visibility of products out of stock.
     To restrict websites in CMS for specific user.
     To restrict languages in cockpit for specific user.    

For more detail please check below link:

https://wiki.hybris.com/display/sed/Restrictions+-+Personalized+Rules+examples

Access rights are permission(read,change,create,delete) for user and usergroup whether they are allowed to edit or see the content.e.g if user account is not granted read access to 'Address' type in HMC then the entry for 'Address' type will not appear in explorer tree for that user account.

Hope this help.

Thanks, Tajinder Singh

[former_member325528]

Hi Vipin!

Here are two basic things that i want to highlight regarding these features. First of all, they have different core mehanisms and different purpose for use:

Access Rights are based on Spring Security, Restrictions (Personalisation rules) are based on flexible search engine. First is used to allow/deny access for particular group/user, second is for data filtration.

For example, my employee needs access to view b2c customers in backend. In this case I should grant to my employee read access for customers, and also I should add Personalisation Rule that says, that only B2C customers will be returned.