Allow a member to have a different role based on application | Voters

Allow a member to have a different role based on application

Eric L

For some applications you might want a member to export data for example. For other applications you may not.

There should be a default role for a member and allow application specific role overrides

August 30, 2023

Jeremy Palmer

I also need to give individuals special permissions in specific apps. This could be done without changing the current simple role permissions system, in data events, more easily if we could access more metadata about each user.

My suggestions in 'Add more properties to member' would help here if you don't want to make the current security model more complex.

marjan yaghouti

I need to give a user role to access managing the apps in one group while restricting his access to delete/edit the apps in another group

Katie Briggs

Merged in a post:

Disable or enable the add record button by app instead of member role.

Michael Cox

It would be helpful to have a way to disable or enable the add record button by app instead of member role. Thank you in advance for any help you can provide.

August 30, 2023

Katie Briggs

Merged in a post:

App Permissions

Tony Padgett

While Roles can have permissions set the apps themselves cannot have the permissions set. It would be helpful if the apps could have specific permissions set based on the Role of the user. For instance I have a Role setup to be able to "Create Records" and "Edit Records" in all apps, I would like to be able to limit any of the apps to not allow that particular Role to "Create Records" but still allow them to "Create Records" in all the other apps. In reverse, if there is a permission that the Role does not have globally and I want an app to allow that Role to have that permission there but not in other apps, that should be allowed as well.

August 30, 2023

Philip Harvey ( US )

This is 100% a requirement for any security, without this the security model is completely broken. We have 100+ apps and if a user needs to write to a single one then they can write to every single one....

Shawn Pickett

We currently use data events and API calls to handle this, but having it built-in would be fantastic! In either case, I think we would still need to continue using our setup for some use cases, such as whether a user can edit a specific section of the form or update the status.