An application’s ability to read and/or write data to a node, is controlled by defining a Source. This provides the appropriate access permissions to an application, at the time it attempts to interact with the data in one or more nodes, through the use of an authorization token.

Access control

The level of read and/or write access that an application has, is determined by the type of provider associated with the source. Providers are the mechanisms that are used to interact with data. The providers that are currently available include:

• Contacthub API.
• JavaScript Website.
• Magento plug-in.
• Contactplan plug-in.
• Contactsend plug-in.
• Android SDK.
• iOS Objective-C SDK.
• Node.js SDK.
• Java SDK.
• Scala SDK.
• .NET SDK.
• Python SDK.
• PHP SDK.

Each provider has a default security level:

• Trusted.
  Read/write access.
• Untrusted.
  Write access only.

Generally, providers are considered as being trusted when they have a high level of authorization token security.

Managing sources

The Customers hub enables you to view, create and edit sources. See Managing sources for more details.