Visibility and Runtime Issue with Organization

rohitk · ‎Jun 17, 2014

I have gone through the Organization wiki section (6.05 "Organizations") and also gone through the Video link provided. I have a scenario where I need to create my own hierarchical organization without having Administrator as the default user group. Every Organization site has a usergroup defined. Now, I have created Mash ups and Services which call and set the data in the Data Tables and Streams. My Problem is : that when a user is not ThingWorx Administrator user, I am not able to access the components on the screen. Options that I tried: 1. I added the topmost organisation to the visibility of the Mashups , Services and Datatables as in the Video. Result: Still faced the same issue and was unable to fetch the data from the services and tables/streams. 2. I added all the usergroups in the Runtime Permissions of all the Mashups, Services and Datatables. Result: I am able to achieve the functionality but my usergroups are dynamic and they increase. This would make it difficult for me to add the user group to all the services/mashups/datatables. Question: 1. How can I make use of Visibility for access Management of Mashups and Services? What is the benefit of using Visibility in Mashups/Services/Datatables/Streams? 2. How do I handle the permission access issue if my usergroups are dynamic and they keep on increasing. Do I have to programmatically add the usergroup to Runtime Permissions to all the Mashups, Services and Datatables? Please advise. <!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:TrackMoves></w:TrackMoves> <w:TrackFormatting></w:TrackFormatting> <w:PunctuationKerning></w:PunctuationKerning> <w:ValidateAgainstSchemas></w:ValidateAgainstSchemas> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:DoNotPromoteQF></w:DoNotPromoteQF> <w:LidThemeOther>EN-US</w:LidThemeOther> <w:LidThemeAsian>X-NONE</w:LidThemeAsian> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript> <w:Compatibility> <w:BreakWrappedTables></w:BreakWrappedTables> <w:SnapToGridInCell></w:SnapToGridInCell> <w:WrapTextWithPunct></w:WrapTextWithPunct> <w:UseAsianBreakRules></w:UseAsianBreakRules> <w:DontGrowAutofit></w:DontGrowAutofit> <w:SplitPgBreakAndParaMark></w:SplitPgBreakAndParaMark> <w:EnableOpenTypeKerning></w:EnableOpenTypeKerning> <w:DontFlipMirrorIndents></w:DontFlipMirrorIndents> <w:OverrideTableStyleHps></w:OverrideTableStyleHps> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> <m:mathPr> <m:mathFont m:val="Cambria Math"></m:mathFont> <m:brkBin m:val="before"></m:brkBin> <m:brkBinSub m:val="--"></m:brkBinSub> <m:smallFrac m:val="off"></m:smallFrac> <m:dispDef></m:dispDef> <m:lMargin m:val="0"></m:lMargin> <m:rMargin m:val="0"></m:rMargin> <m:defJc m:val="centerGroup"></m:defJc> <m:wrapIndent m:val="1440"></m:wrapIndent> <m:intLim m:val="subSup"></m:intLim> <m:naryLim m:val="undOvr"></m:naryLim> </m:mathPr></w:WordDocument> </xml><![endif]><![if gte mso 9]><![endif]><![if gte mso 10]>

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}

adam11 · ‎Jun 17, 2014

Hi Rohit,

1. In some use cases, you may want to not only secure the Services a user may invoke, but also the Entities he can view. The functionality provided by Organizations allows you to define "visibility" for Entities allowing you to further secure your ThingWorx application.

2. More information about your use case would be beneficial. I'm interested to hear why you are dynamically creating Groups. If you are dynamically creating Groups, you will need to programmatically set runtime permissions for the Services they will invoke.

Thanks,

Adam

rohitk · ‎Jun 17, 2014

Thanks Adam for your reply.

So what I understand is that the Visibility adds the security component to individual components (Mashup/Services/Datatables/Streams).

My requirement is such where I have to enable the application to add subsites as in the image attached and each site would have limited access to users of that site.

!data:image/png;base64,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|alt=|src=data:image/png;base64,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!
So, what my approach is that, I am creating a usergroup for each subunit and attaching them to each subsite.

Since, all the services/entities require runtime access as suggested, I can initially add usergroups to all the entities at the development time . But it would become an extra overhead if I have to add a new site/subsite to the organisation (which would have a new usergroup).
Do you suggest that we create a common usergroup for all the entities.

adam11 · ‎Jun 17, 2014

I assume the common Group would have permission to invoke Services while the dynamically created Groups would be placed into subunits to use for setting visibility? So while a User may have permission to invoke a Service on a particular Entity, it may not have visibility and therefore wouldn't be able to invoke the Service anyway.

bikramp · ‎Jun 18, 2014

Adam.. this might not solve my problem as such.

The way I look at it is: If I set the visibility of a particular entity( mashup/services etc), all the users under that organisation should be able to view and access entities assigned to that Organisation through the Visibility setting.

Otherwise,

if I run through my case, if I have to add all the users to a common usergroup and also to additional usergroups (considering that my sites are increasing and each site has its own usergroup), then this becomes an additional overhead.

Cant organisation and visibility help in this regard?

adam11 · ‎Jun 18, 2014

Bikram,

I think there may be some confusion as to how Organizations and Security work in ThingWorx. Please review the Wiki entries and accompanying videos in section 06 Security and 06.05 Organizations.