Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access Group management as a tenant #98

Open
elv-serban opened this issue Oct 4, 2023 · 4 comments
Open

Access Group management as a tenant #98

elv-serban opened this issue Oct 4, 2023 · 4 comments
Assignees

Comments

@elv-serban
Copy link

elv-serban commented Oct 4, 2023

To match the current Access Control Group functionality (as of contracts rev e8e0b75c399a7382eb92e1aa55ec3fa2cb5b9d50)

Actors:

  • owner - owner of the group
  • manager - in manager list
  • member - in member list
  • member of group with rights (manage or access) (a 'MOG')

This is the suggested client and fabric browser behavior:

Create new group

  • set tenant ID (both contract meta _ELV_TENANT_ID and fabric meta tenantContractId)
  • add group rights 'manage' to the Tenant Admins group
  • visibility 1

Group fabric browser page:

  • show the permissions pull down with options "Publicly Listable" and "Members Only" (based on visibility 1 or 0)
    • owner and manager should be allowed to change it
  • for all members and managers and owner and MOGs:
    • show members and managers and Groups
  • for all members and managers and owner show "Show metadata"
  • for owner and managers show "Manage" button (edit fabric metadata)
  • for owner and managers show "Add Member"
  • for managers and members show "Leave Group"
  • for owner and managers show "Manage Group Permissions" in the Groups tab

For users that are not members or managers but are members of another group with rights (MOGs) (commonly "Tenant Admins")

  • show the groups in the list (they are naturally shown as the users have them in their access index)
  • if group visibility is 1 - clicking into the group can show the name and description (from fabric metadata)
    • and can show the members and managers from contract - either membersList of getMeta(members)
  • if group visibility is 0 - just don't show name and description (member list should still show)
    • but still show the members and managers

For other users (not owner, member, manager or MOG)

  • they don't see groups in their 'list'
  • if they go directly to the group page:
    • they see the minimum screen - address, owner, contract
image
@elv-arun
Copy link

A user who is a manager is not able to change permissions.

Screen Shot 2023-10-11 at 12 49 38 PM

@elv-arun
Copy link

For this requirement:

For all members and managers and owner and MOGs:

  • show members and managers and Groups
Screen Shot 2023-10-11 at 1 01 32 PM

Screen Shot 2023-10-11 at 1 02 44 PM

@elv-arun
Copy link

Disable Manage for non-owners >> Verified

Change the group labels “Access” to “View” across libraries, content objects, content types, and access group >> Verified

Remove “See” from Access Groups group permissions >> Verified

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants