Is there any possibility to modify user group rights, that they are able to pause/acknowledge sensors, but not create and move objects?
Article Comments
Thank you for your reply. Is it planned to extend user rights management in future releases?
Mar, 2010 - Permalink
Found a workaround:
Access right for all groups and devices = read
Access right for all sensors = write
Users are now available to pause and acknowledge sensors, but not to move them
Mar, 2010 - Permalink
Does the workaround apply to version 9.2.x as well? I'd like to create a group of users that have the ability to pause/resume/acknowledge sensors or devices, but not be able to create/clone/delete devices or sensors.
Feb, 2012 - Permalink
Hi,
this should work for version 9.2 as well but we have not tested it.
Best regards
Feb, 2012 - Permalink
I have implemented the rights on 9.2.x. However, the major issue with this method is that the users can not pause/resume a device or group, they can only pause/resume sensors. For example, they get an "Ajax Request Failed PE1001 /api/pause.htm 400 bad request" error when trying to pause at the device level. A similar error happens when they resume.
Really am expecting to see better rights management in the next update. I just don't see the need for my "operators" to have admin rights.
Mar, 2012 - Permalink
If the users do not have more than read-rights to a device, they cannot pause it. This will most likely not be changed. You do not need to give those users admin rights, but write-rights on those devices.
Mar, 2012 - Permalink
But if they have write permissions on a device, they can create/delete sensors for a device, which is what we don't want "operators" doing.
Mar, 2012 - Permalink
I'm afraid then the only option is to mark all sensors on a device and pause them at once.
Mar, 2012 - Permalink
That is not possible at the moment, sorry. Rights management is limited to the following 4 settings per object in the sensor tree:
... see its status and configuration
... see its status
... edit its configuration (except access rights)
... create sub objects
... delete sub objects
... edit access rights on object level
Note: To delete or create objects you must have at least "write" rights on the parent object.
Mar, 2010 - Permalink