Hierarchical permissions model within a document

A computer program product embodied on a non-transitory computer readable storage medium and comprising instructions executable by a processor to:

• receive a document model definition defining a document hierarchy and a document permission model associated with the document hierarchy, the document hierarchy comprising document nodes corresponding to respective document portions and the document permission model comprising a hierarchy of document permission nodes defining document level hierarchical permissions for roles with respect to the respective document portions, each document permission node associated with a corresponding document node and defining, with respect to a respective document portion corresponding to the document node with which that permission node is associated, a corresponding document level permission for a role;
• based on the document model definition, set the document level hierarchical permissions on the respective document portions of a document;
• receive a request from a requesting user to perform an action with respect to a portion of the document;
• determine whether the action to be performed is permitted based on the corresponding document level permission set with respect to the portion of the document and a role of the requesting user;
• allow the action to be performed based on a determination that the action is permitted;
• and
• block the action from being performed based on a determination that the action is not permitted.

A method comprising:

• receiving, by a processor, a document model definition defining a document hierarchy and a document permission model associated with the document hierarchy, the document hierarchy comprising document nodes corresponding to respective document portions and the document permission model comprising a hierarchy of document permission nodes defining document level hierarchical permissions for roles with respect to the respective document portions, each document permission node associated with a corresponding document node and defining, with respect to a respective document portion corresponding to the document node with which that permission node is associated, a corresponding document level permission for a role;
• based on the document model definition, setting, by the processor, the document level hierarchical permissions on the respective document portions of a document;
• receiving, by the processor, a request from a requesting user to perform an action with respect to a portion of the document;
• determining, by the processor, whether the action to be performed is permitted based on the corresponding document level permission set with respect to the portion of the document and a role of the requesting user;
• and
• allowing, by the processor, the action to be performed based on a determination that the action is permitted.