Skip to main content
C
CS_92035366-Contributor
6-Contributor
September 1, 2020
Question

ThingShape Instance Permission

  • September 1, 2020
  • 1 reply
  • 2781 views

Hello all,

 

i want to have a Thing that implements a ThingTemplate and various ThingShapes with exclusive permissions, i.e. a "ProjectAdmin_ThingShape" that provides services only available to users within the "ProjectAdmin" Group, a "ProjectSupervisor_ThingShape" with services only available to members within the "ProjectSupervisor" Group etc.

 

When i set the permissions, users with access to the implementing thing were still able to execute any services from the implemented ThingShapes.

 

Is this desired behaviour or did i miss something? I need cascaded permissions, so the thing is already instantiated on another permission restriction and if i had to instantiate the things for each of the groups mentioned above, the complexity multiplies.

 

The access "should not" be possible on a mashup level anyways, but for security reasons i want this properly modeled with the Thingworx permissions framework.

 

Thanks for your help.

1 reply

P
PaiChung22-Sapphire I
22-Sapphire I
September 1, 2020

Did you do specific 'override' permissions on the services?

From what you describe, if I have several shapes and I permit the services on a shape for a particular group and I do not 'overturn' that by setting sweeping permissions on the Template or Thing, it should function as you desire.

    C
    CS_92035366-ContributorAuthor
    6-Contributor
    September 2, 2020

    Thanks for your response.

     

    I did some more tuning, but the result remains the same. When i enable the respective groups to execute services on the ThingTemplate, the ThingShape services can be executed as well. If i deny service execution there, none of the services can be executed.

     

    Any hints how i could realize a functionality like that? There will be more groups in the future, the design can't be static but some of the funcionality remains the same depending on the "FunctionalityGroup" membership - which i wanted to be represented within the ThingShapes. I want to avoid to add and set permissions for multiple groups every time.

    P
    PaiChung22-Sapphire I
    22-Sapphire I
    September 2, 2020

    Are you using Override?

    Terms & ConditionsAccessibility statement