Functions for Settings

Introduction

The functions control access to view or modify settings. Settings come in 3 categories

Settings for WEBSITE: Controls both visuals and functions in the front-ends
Settings for ORGANISATION:
- Regular (Privilege: Admin)
- Sensitive: for secrets, keys, etc (Privilege: System)
System settings: Installation-wide configuration of services

Users

Regular users require the function VIEW_ADMIN_SETTINGS for working in the MediaHaven 2.0 front-end. The default MediaHaven 2.0 roles all have this new function.

Functions `23.2`

In version 23.2 we have greatly simplified the required functions for managing settings into

Settings	Required functions

Settings	Required functions
WEBSITE (your organisation)	`VIEW_ADMIN_SETTINGS`
WEBSITE (other organisation)	`VIEW_ADMIN_SETTINGS` + `ADMIN_VIEW_ALL_ORGANISATIONS`
ORGANISATION (yours)	`VIEW_ADMIN_SETTINGS`
ORGANISATION (other)	`VIEW_ADMIN_SETTINGS` + `ADMIN_VIEW_ALL_ORGANISATIONS`
ORGANISATION SENSITIVE (yours)	`VIEW_SYSTEM_SETTINGS`
ORGANISATION SENSITIVE (others)	`VIEW_SYSTEM_SETTINGS` + `ADMIN_VIEW_ALL_ORGANISATIONS`
SYSTEM	`VIEW_SYSTEM_SETTINGS`

For editing settings, the user needs to corresponding edit functions instead of the view functions

EDIT_ADMIN_SETTINGS
EDIT_SYSTEM_SETTINGS (for security only special internal users are allowed to have this function)
ADMIN_EDIT_ALL_ORGANISATIONS

Functions: up to version `23.1`

Read Access for Settings

Settings	No function	`READ_` `ORGANISATIONS`	`VIEW_` `SYSTEM_` `SETTINGS`	`ADMIN_` `ORGANISATION`	`ADMIN_` `ALL_` `ORGANISATIONS`

Settings	No function	`READ_` `ORGANISATIONS`	`VIEW_` `SYSTEM_` `SETTINGS`	`ADMIN_` `ORGANISATION`	`ADMIN_` `ALL_` `ORGANISATIONS`
WEBSITE (your organisation)
WEBSITE (other organisation)
ORGANISATION (yours)
ORGANISATION (other)
ORGANISATION SENSITIVE (yours)
ORGANISATION SENSITIVE (others)
SYSTEM

Write Access for Settings

Settings	No function	`ADMIN_` `WEBSITE`	`ADMIN_` `BACKEND_` `SSERVICES`	`ADMIN_` `ORGANISATION`	`ADMIN_` `ALL_` `ORGANISATIONS`

Settings	No function	`ADMIN_` `WEBSITE`	`ADMIN_` `BACKEND_` `SSERVICES`	`ADMIN_` `ORGANISATION`	`ADMIN_` `ALL_` `ORGANISATIONS`
WEBSITE (your organisation)
WEBSITE (other organisation)
ORGANISATION (yours)
ORGANISATION (other)
ORGANISATION SENSITIVE (yours)
ORGANISATION SENSITIVE (others)
SYSTEM