Access control

Access control in Cube involves authentication and authorization.

During authentication, Cube verifies the user's identity via one of the supported methods. Then, it assigns a security context to the request, optionally enriching the security context with additional attributes, e.g., via the authentication integration.

During authorization, Cube uses the security context to enforce member-level security, row-level security, and data access policies.