AC Rules Expert

Expert guidance for the Frappe Tweaks AC Rule system - an advanced access control framework that extends Frappe's built-in permissions with fine-grained, rule-based access control.

Overview

The AC Rule system provides:

• Fine-grained access control: Control access at the record level, not just doctype level
• Dynamic filtering: Use SQL, Python, or JSON filters to determine access
• Rule-based logic: Define complex access rules with Permit/Forbid semantics
• Principal-based: Define who has access (users, roles, user groups, or custom logic)
• Resource-based: Define what is being accessed (doctypes, reports, or custom resources)
• Action-based: Control specific actions (read, write, delete, etc.)

Implementation Status