Project visibility/design/runtime permission inheritance

Forum|Forum|9 years ago
September 20, 2016
4 replies
6358 views

Is there anyway to set visibility/design/runtime permissions to all entities that belong to specific project?

Is permissions inheritance. limited to ThingTemplate <--- Thing (instance)?

Security

Best answer by CarlesColl

Hi Leo,

Previous answers aren't 100% accurate about setting permissions by ProjectName, on 7.2 you have new snippets to Add permissions to a things that belong to a ProjectName.

Look for: SetEntityPermissions Snippet

Also won't be hard to build a service which queries entities that belong to a project and set it in batch.

Best Regards,

Carles.

T

ttielebein

5-Regular Member

Hello,

You could assign permissions on the ThingShape level, and then have all things or templates with a certain permission scheme implement the ThingShape with those permissions granted. This is generally not advised because it can become very hard to manage and result in security issues for your application. The best practice way of granting permissions is to do it on the ThingTemplate level.

Please let me know if you have further questions on this.
Thanks!

Tori

R

rupadhyay

1-Visitor

Leo Dias Besides , what Tori said ,

Run Time, Design Time, and Visibility permissions on a ThingTemplate will only apply to that ThingTemplate and any child ThingTemplates

Run Time Instance, Design Time Instance, and Visibility Instance permissions on a ThingTemplate will be applied to all Things that use this ThingTemplate

Run Time, Design Time, and Visibility permissions on a Thing will override any instance permissions set on the ThingTemplate level

*Design Time Instance permissions are currently not functioning as expected.

C

CarlesColl

Answer

1-Visitor

Hi Leo,

Previous answers aren't 100% accurate about setting permissions by ProjectName, on 7.2 you have new snippets to Add permissions to a things that belong to a ProjectName.

Look for: SetEntityPermissions Snippet

Also won't be hard to build a service which queries entities that belong to a project and set it in batch.

Best Regards,

Carles.

N

nagrawal-2

1-Visitor

Hi Carles,

Thanks for this answer, I do find it bizarre that we can't just set permission at the project level for all the entities belongs to a project. But anyways if we can only achieve this via Service. Can you please tell me, where would we execute this service? or do we need to execute this services all the time?

Regards,

Neetu