Billspree

The platform implements a centralized Attribute-Based Access Control (ABAC) framework using Security Attributes to control visibility and access across pricing, subscription, customer, and operational entities. Security Attributes provide fine-grained authorization by evaluating whether a user’s assigned attributes match the security configuration of a resource. This enables secure and scalable access control across enterprise environments without relying solely on static role-based permissions. Security filtering can be applied across:

rate lists
charge rules
plans
base plans
add-ons
customers
Employee

Purpose of Security Attributes

Security Attributes are designed to provide:

multi-dimensional access control
tenant-level data isolation
region-based visibility restrictions
controlled pricing visibility
secure subscription access
enterprise-grade authorization governance

The framework ensures users can only access resources aligned with their assigned business dimensions.

Core Security Model

The ABAC framework evaluates access using two primary components:

Component	Description
Subject Attributes	Attributes assigned to authenticated users
Resource Attributes	Attributes assigned to entities/resources

Access is granted only when the subject’s attributes satisfy the resource’s security requirements.

Security Matching Logic

The ABAC engine evaluates access using multi-dimensional attribute matching.

OR Logic Within a Dimension

If multiple values exist inside the same dimension, any overlapping value grants eligibility for that dimension. Example

region = north OR east

If the user belongs to either north or east, the dimension passes validation.

AND Logic Across Dimensions

All configured dimensions must match simultaneously for access to be granted. Example

region match
AND
department match
AND
tier match

Failure in any dimension results in access denial.

Authorization Evaluation Example

User Attributes

Resource Attributes

region = north,south
department=sales

Authorization Result

Access Granted

Because:

region overlaps (north)
department overlaps (sales)

Administrative Access

Administrative users bypass Security Attribute filtering entirely. Administrative access provides unrestricted visibility across.

Create Security Attributes

Click on My Account
Click on My Team
Click on the Security Attributes tab
Click on the Create button
Add name and values of attributes
click save button to save attributes

Summary

Security Attributes are the platform’s ABAC layer, controlling access by matching a user’s assigned attributes against the attributes configured on pricing, subscription, customer, and operational resources, independent of the user’s Role or Permission List.

WorkSpree

Spree AI

My Account

Security Attributes

Purpose of Security Attributes

Core Security Model

Security Matching Logic

OR Logic Within a Dimension

AND Logic Across Dimensions

Authorization Evaluation Example

User Attributes

Resource Attributes

Authorization Result

Administrative Access

Create Security Attributes

Summary

​Purpose of Security Attributes

​Core Security Model

​Security Matching Logic

​OR Logic Within a Dimension

​AND Logic Across Dimensions

​Authorization Evaluation Example

​User Attributes

​Resource Attributes

​Authorization Result

​Administrative Access

​Create Security Attributes

​Summary

Purpose of Security Attributes

Core Security Model

Security Matching Logic

OR Logic Within a Dimension

AND Logic Across Dimensions

Authorization Evaluation Example

User Attributes

Resource Attributes

Authorization Result

Administrative Access

Create Security Attributes

Summary