Follow

Administration: Restriction of creation/change of repository items by usage of facet permissions

Every user with author permissions is normally allowed to create and change repository items, for example roles, applications, organisation units, etc.

If some or all repository item types are managed centrally or are imported from another tool, it might be useful to avoid a manual change or creation of new items (for example during the description of a sub process). 

Example:

To achieve that only existing applications can be used in Symbio and no new ones can be created manually by regular authors, the following settings are necessary:

mceclip2.png

  • Here you select the entry "ITArchitecture" from the list of facets and then select "Permissions" -> "Change permissions" in the drop-down menu.
  • Following dialog is shown:

mceclip0.png

  1. Please set the Dropdown “Inherit permissions” to “Starting from default permissions”
  2. Select the permission for the majority of the users
  3. In the permission list below please create one new permission for the users who should be allowed to change the applications
  4. add the users who should be allowed to change items or create items. It is also possible to add a user group instead/additionally to single users.
  5. Press OK – this will take several minutes until the changes are done for all applications and all users in the database.

It is possible to add more users/remove users later in this dialog.

You can repeat this for every facet in the list, which should be restricted in the same way.

 

After applying the new permission successfully to the database, an excluded user does not have the possiblity to add items in the used facet (the button "New" is inactive):

mceclip3.png

Also, when editing a process, it is now only possible to select existing elements.

 

 

 

0 Comments

Article is closed for comments.
Powered by Zendesk