Access control
Access in Quaeris is checked at the row, the column, and the field, on every single query, not once at login. A person with access to regional sales figures does not automatically gain access to the underlying customer records those figures are built from.
Personas define what a role can see down to individual dimension members, and the system logs a denial with the same care it logs an approval, so a security review does not depend on someone remembering to write the denial down.
Row, column, and field-level security enforced at every query by the platform itself.
Functional access assigned per role, down to individual dimension members.
Every denied access attempt is recorded alongside every approval.



