## {i18n arg_name=$workflow_name}Security Overview: #name#{/i18n}

{i18n arg_appname="$appname"}#appname# has a powerful security model, in which users can only see documents they have permissions to see. Workflow is the finest-grained way to allocate permissions to a document, since it can override the permissions assigned at a folder level.{/i18n}

{i18n}There are 3 different ways in which workflows interact with the system's security{/i18n}:

1. {i18n}Document Permissions{/i18n} {i18n}(by state){/i18n}
2. {i18n}Action Restrictions{/i18n} {i18n}(by state){/i18n}

{* Probably not the _cleanest_ approach, but it works. *} {if is_null($context->oState)}
3. {i18n}Transition Restrictions{/i18n}
{/if}