ActivePivot Security Overview

ActivePivot is designed to integrate within an existing information system, that is particularly important for security because ActivePivot may delegate authentication and authorization to existing facilities, for instance an LDAP directory, an ActiveDirectory server, or a custom in-house application.

That's why the security stack of ActivePivot is implemented with separation of concerns in mind, the three security layers being independent, pluggable and decoupled from the core software.

We distinguish several layers in the security stack:

• Authentication: validating a user and its password
• Authorization and Entitlements: entitling an authenticated user with its user name, roles, etc.
• The entitlements are then used, within the ActivePivot application, to determine which data can be queried and what actions are allowed: see Datastore Access Control, Cube Access Control and Branch Permission Manager.