Determine Access Privileges

IDM determines what access a user has as follows:

IDM checks the onRequest script specified in router.json. By default, this script calls router-authz.js.
If access requirements are not satisfied, IDM then checks for any privileges associated with the user's roles.

onResponse and onFailure scripts are supported when using privileges. onFailure scripts are called only if both the onRequest script and the privilege filter fail. onRequest, onResponse, and onFailure scripts are not required for the privilege mechanism.