Celoxis offers a highly customizable and flexible security structure. It is based on the popular role based concept. You group users into roles and then define privileges for a role. Celoxis offers two unique concepts to make this extremely powerful.

First, there are two levels of policies, Global and Object. Global policies apply across the application while Object policies apply only to that specific Object. Policies, if defined at the Global level supercede those at the Object level. For example a Global policy applies to all projects while an Object policy for a project applies only to that project. the For example, if a Global level policy permits/denies a role the privilege to add tasks to projects, an Object policy for that project does not override this. This enables you to have fine grained access control.