The system provides a security model to secure any action from being accessed by unauthorized users. The admin has full flexibility to grant/revoke the permissions to users as needed.
The system allows the admin to create user groups for ease of control and permission assignment, and each user will automatically inherit the the permissions allowed to the groups he/she belongs to
In addition to the application secured functions, the system even protects the files itself from any unauthorized access, by performing the file operation under the account of admin, so the files are only displayed and managed by users through the application, and accordingly the file access functionality falls into the same controls like all other secured functions of the system.