# Local code isolation[¶](https://doc.dataiku.com/dss/latest/user-isolation/capabilities/local-code.html#local-code-isolation "Permalink to this headline")

Local code isolation is the fundamental component of User Isolation Framework.

Each time a user submits code to be executed by DSS, DSS will use *sudo* to execute the code as this end-user. Standard UNIX permissions and isolation guarantee that the user cannot access any forbidden information in the DSS data dir.
