Is there any possibility to modify user group rights, that they are able to pause/acknowledge sensors, but not create and move objects?


Article Comments

That is not possible at the moment, sorry. Rights management is limited to the following 4 settings per object in the sensor tree:

RightA member of a user group can...
none... not even see an object
read... see an object (including all sub objects)
... see its status and configuration
write... see an object (including all sub objects)
... see its status
... edit its configuration (except access rights)
... create sub objects
... delete sub objects
full... everything of 'write'
... edit access rights on object level

Note: To delete or create objects you must have at least "write" rights on the parent object.


Mar, 2010 - Permalink

Thank you for your reply. Is it planned to extend user rights management in future releases?


Mar, 2010 - Permalink

it is not certain yet. That is all I can say for now, sorry.


Mar, 2010 - Permalink

Found a workaround:

Access right for all groups and devices = read

Access right for all sensors = write

Users are now available to pause and acknowledge sensors, but not to move them


Mar, 2010 - Permalink

Does the workaround apply to version 9.2.x as well? I'd like to create a group of users that have the ability to pause/resume/acknowledge sensors or devices, but not be able to create/clone/delete devices or sensors.


Feb, 2012 - Permalink

Hi,
this should work for version 9.2 as well but we have not tested it.
Best regards


Feb, 2012 - Permalink

I have implemented the rights on 9.2.x. However, the major issue with this method is that the users can not pause/resume a device or group, they can only pause/resume sensors. For example, they get an "Ajax Request Failed PE1001 /api/pause.htm 400 bad request" error when trying to pause at the device level. A similar error happens when they resume.

Really am expecting to see better rights management in the next update. I just don't see the need for my "operators" to have admin rights.


Mar, 2012 - Permalink

If the users do not have more than read-rights to a device, they cannot pause it. This will most likely not be changed. You do not need to give those users admin rights, but write-rights on those devices.


Mar, 2012 - Permalink

But if they have write permissions on a device, they can create/delete sensors for a device, which is what we don't want "operators" doing.


Mar, 2012 - Permalink

I'm afraid then the only option is to mark all sensors on a device and pause them at once.


Mar, 2012 - Permalink