Visibility¶

Visibility decides which documents, folders, and metadata a user can see after the ACL grants access.

Sharing rules apply conditions to access. They can allow or deny based on attributes such as repository, document group, type, department, or user. A deny condition wins.

Case-level access¶

A case can be restricted to specific users or groups. Documents in a restricted case follow the case access, even if the user has broad document permissions.

Restricted repositories¶

Restricted repositories are hidden unless the user has documento:ver_restringidos. This narrows access even for users with documento:ver_todo.

Internal taxonomy¶

System repositories and groups can be hidden from configuration screens. Seeing them requires configuracion:ver_interna, granted explicitly. A *:* grant does not automatically show internal taxonomy.

Confidential and hidden metadata¶

Metadata fields can be confidential or hidden. They require metadata:ver_confidencial or metadata:ver_hidden. A document can be visible while some of its fields are masked.

Expediente access¶

The Expediente resource is defined but hidden from the roles UI. Access is granted by the platform's resource rules.