Edit1 What are Groups?
IssueNet groups are used to organize users and set permissions on IssueNet items. Most organizations will implement several groups with various permissions in place per group. IssueNet users can be members of none, one or several groups. When a user is a member of several groups with different permissions on the same item, the user will be limited by the group that has the least permissions. Users are granted access until at least one permission is found that denies access.
If a user is not a member of a group with permissions applied, and the user does not have individual permissions applied, the user will have full access to all items in IssueNet, including the right to insert and delete.
Edit2 Creating and Editing Groups
- Select File|New|Group OR In the Data Source Explorer right-click the Groups button and select New OR Click the New Group button
- Enter a Name for the group
- Optional) Enter a Description of the group
- (Optional) Add users to the group
- (Optional) Set group permissions
- Select Actions|Update or click the Update button
The Group form is used to track group membership and security. The group form is divided into the following tabs:
ScreenCap
- General- The General Tab allows the administrator to add Descriptive comments about the group.
- Users- The Users Tab allows the administrator to add Users to the Group. To add Users, click the Add button, select an appropriate query and select the Users you wish to add, click OK to dismiss the Find Users dialog.
- Security- The Security tab allows the administrator to define the permissions of the group to Read, Write, Insert or Delete IssueNet items. Clicking the Add button opens the Permissions Wizard.
Edit2.1 Cloning Groups
Cloning a group creates a new group with the same properties – including permissions. Cloning groups allows you to save time by cloning groups with similar permissions, and making adjustments, instead of creating each group separately. When adjustments are made on the cloned group, the original group is unaffected.
- In the Data Source Explorer highlight Groups and select the Group you wish to clone
- Select Edit|Clone
- Enter a Name in the New Group form
- Select Actions|Update or click the Update button
Edit2.2 Setting Group Permissions
Permissions for IssueNet groups are defined using the Permissions wizard. Permissions determine whether users have full access, read, write, create or delete privileges to IssueNet objects. Permissions can be applied to all instances of an Object in the Class or to a specific Object and its children. For example an administrator may wish to limit a user's ability to update Issues in a specific Folder.
IssueNet grants full access to all members of a class until permissions are applied. Once permissions are applied to a member of a class, IssueNet denies access to all other members until specific permissions are allowed.
Permissions are set in two basic ways:
1- Permissions can be set based on a relationship to a parent object, and the permissions are inherited by the child objects. For example, permissions can be set to deny access to issues that are related to a specific folder or tasks based on a relationship to a project. When permissions are set on a parent object such as a folder or project those permissions are inherited by their children.
2- Permissions can be set on specific members of a class. A user or group can be denied access to a specific issue, folder, query, report, or other item. For example, you may want to prevent a user or group from viewing or modifying a specific issue, folder, or query.
When permissions are set based on a relationship to a parent object, such as a folder or project, an object will be granted permissions based on the parent object that is most closely related to it. For example, if permissions are set to deny access to tasks on a root level project and to grant access on a sub-project, access will be denied to all tasks except those related to the sub-project or a child of the sub-project.
The following are the permissions that may be allowed or denied:
- Full Access- Allows the group full control to the selected Object
- Read- Allows the group to fetch and view the Object
- Write- Allows the group to update the Object
- Create- Allows the group to insert an instance of the Object into the database
- Delete- Allows the group to delete the Object from the database
Edit2.3 The Permissions Wizard
- Open a Group Form and select the Security tab to open the Permissions Wizard.
- Click Add to open the Permissions Wizard and click Next
- Select the Class from the Drop down menu (e.g: Issue)
- Select either All Objects or Specific object and its children.
- If you select All Objects, click Next.
- If you select Specific objects and its children click the Find button to open the Query dialog. Select an appropriate Query (For example, if you are working with Issues, you could select a query related to Folders to limit or allow access to Issues contained within the specified Folder(s)) and click OK to close the Query dialog and click Next.
- Select the appropriate permissions for the Object and click Finish