Permissions & Rights
- Alexis Rombaut
- Tibo D'Hondt
- Bart Quintens
Introduction
As described in Permissions: Users, Groups & Records a record is linked with several groups. Each link, called a permission, describes which of the following 3 rights it has
Rights
Right | Ability |
|---|---|
Read right | Ability to see the metadata of the record |
Write right | Ability to edit and delete the record |
Export right | Ability to download the record |
Permissions
For example, take the example image X linked with 3 groups with the following rights
Group | Read Right | Write Right | Export Right |
|---|---|---|---|
Everyone | ✓ | ✗ | ✗ |
Marketing | ✓ | ✓ | ✗ |
Admin | ✓ | ✓ | ✓ |
We can rephrase this as
Users linked with the group “Everyone” will have the ability to see the image X.
Users linked with the group “Marketing” will be able to see and edit the image X.
Users linked with the group “Admin” will be able to see, edit and export the image X.
Minimum requirements
When saving a record, at least one group with write rights needs to be present on the record (Zone and System groups excluded).
Troubleshooting
Upload fails
This can happen when the system uses the default permissions (based on the user’s groups). Possible fixes are:
Enabling permission inheritance on the record-type(s)
Making sure that users that are allowed to create/edit/upload are part of at least one group with (default) write rights