Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Excerpt
Include Page
TERMS:Permission Sets
TERMS:Permission Sets
Include Page
TERMS:Exclusive Permission Sets
TERMS:Exclusive Permission Sets
Expand
titleCreate a Content Permission Set

Create a Content Permission Set

  1. Open Content permission sets

  2. Click create

  3. Provide name

    1. Set exclusive, meaning overwriting all other permissions when applied e.g. for embargo or archival.

  4. Save

After Creating the Content Permission Set

  1. On the right side set Role Permissions (permission level per role, e.g. only admins can view, edit & delete)

  2. On the left side set Permission Set

  • Select Content or Schema Permission

  • Provide details
    1. Permissions (which role can apply this permission set, e.g. only admins can apply and manage this permission set)

    Picturepark_Piz-Roseg_Access_Create_Content-Permission-Set_Embargo-Content_2023-06-13_15-05-28.mp4
    Expand
    titleCreate a Schema permission set

    Create a Schema permission set

    1. Open Schema permission sets

    2. Click create

    3. Provide name

      1. Set exclusive, meaning overwriting all other permissions when applied e.g. for embargo or archival.

    4. Save

    After Creating the Schema Permission Set

    Add
    1. On the right side add Role Permissions (permitted content modifications per role

    )Add Permission Set Permissions
    1. e.g. product can mange the schema, dealers can view the schema and its items)

    2. On the left side add permission set permissions (permitted access to this specific

    Permission Set
    1. permission set per role e.g. product can apply the schema permission set)

    Picturepark_Piz-Roseg_Access_Create_Schema-Permission-Set_Product-List-Schema-Visible-to-Dealers-manageble-by-PM_2023-06-13_15-05-28.mp4

    Expand
    titleAdd Permission Set to Schema

    Add Permission Set to Schema

    To add Permission Set a schema permission set to a schema :

    • Select Open Schemas

    • Find your schema .Click on Permissions and add and doubleclick to open the details.

    • On the right side find “Permissions”

    • Add one or multiple Permission Sets

      • The selected ones are shown before assigning them. 

      • Validate the permissions using the matrix.

    • Save.

    * Disable the View for all button

    . It is currently enabled per

    , which grants view for all permission by default on

    the

    schema creation

    of a schema.
  • Click on the Save button.

  • VIDEO: How to Add Permission Set to a Schema (List, Layer):

    permission-set_add-to-schema

    .

    Picturepark_Piz-Roseg_Access_Schema_Apply-Schema-Permission-Set-to-List_2023-06-13_15-05-28.mp4

    Expand
    titleChecking the Effective Permissions on a Schema

    Checking the Effective Permissions on a Schema

    After adding permissions to a schema you can check the effective permissions using the permission matrix. There you see the (1) applied permission sets with exclusive ones listed in the permission set name and you find the matrix (2) which shows how these permission sets are combined and which permissions are active on the schema

    Click on Permissions and then show advanced

    e.g. in the screenshot Editor Corporate do not have access anymore.

    Image Added
    1. Open the Permissions and find the permission matrix.

    2. Use the switches next to the Permission Sets to check the effects of disabling/unassigning them. 

    VIDEO: How to Check Permission Using Matrix:

    permission-set_check-matrix-on-schema.mp4Picturepark_Piz-Roseg_Schemas_Validate-Permission-with-Permission-Matrix_2023-06-13_15-21-32.mp4

    General Remarks

    The advanced view of the permissions applied to a Content Item is not restricted and can be seen by all users that have access to the content item. Please note this is for display only and does not remove Permission Sets from the schema itself. 

    Expand
    titlePermission Matrix

    Permission Matrix

    Image RemovedImage Added

    As you can see in the above screenshot there are two three permission sets applied to this schema, and the default “View for all”. As you can see the applied permission sets build on each other. The effective permissions are displayed in the matrix. I can also see what they would be if I removed the permission set for example by turning the slider on or off for each permission set. Please note this is for display only and does not remove permission sets from the schema itself. 

    As you can see the applied permission sets build on each other unless there are exclusive permission sets. In the case of exclusive permission sets, these will negate any non-exclusive permission sets applied. In this example, I have added an Archived (exclusive) Schema managebly by product | Exclusive permission set to the example above. As you can see the negated permissions are denoted with a red cross:

    Image RemovedImage Added

    If View for all is also enabled ( this effectively gives all users View permission on the schema) then you will see this reflected in the advanced view:

    Image Removed

    .

    Expand
    titleAccess Permission Set in Search or Filter

    Access Permission Set in Search or Filter

    The Permission Sets of a Content Item are saved in a field called: 

    permissionSetIds

    Therefore you can access Permission Sets via this field in Display Pattern, Filter, Query Filter, or searches. 

    Case

    Value

    Exact Match

    permissionSetIds:GUID

    Has Permission Set Assigned

    _exists_:permissionSetIds

    Has No Permission Set Assigned

    -_exists_:permissionSetIds

    Filter by label (Content by label)
    showLabelsfalse
    max50
    showSpacefalse
    titleSolutions
    cqllabel = "advanced-search" and label in ( "permission" , "permissionset" ) and space = "SOL"
    Expand
    titleAccess Permission Set in Sidebar Filter

    Access Permission Set in Sidebar Filter

    Some default system fields are used to aggregate Ids from Picturepark system items e.g. permissionSetIds or layerSchemaIds or contentSchemaId and display them in Filters. 

    1. Open Filters

    2. Add a new Filter

    3. Select Permission

    4. Save

    Expand
    titleUpdate a Permission Set

    Update a Permission Set

    1. Open Permission

    2. Select Permission Set

    3. Update

    4. Save

    Expand
    titleUpdate View for All or Exclusive

    Update View for All or Exclusive

    Enabling View for all in the schema settings applies View Permission to the Schema for all users in the Picturepark.

    View for all is independent of applied permission sets. Please note that exclusive permission sets will not turn off View for all. If you are applying an exclusive permission set that is intended to "turn off" other non-exclusive permission please do not forget to also disable View for all.

    Expand
    titleRemove all Permission Sets from Content

    Remove all Permission Sets from Content

    1. Open the Content Item

    Clicking on Remove All will remove all
    1. Unassign permission sets

    1. one by one

    2. See "View for all" still switched on (not affected by "Remove All" function)

    VIDEO: How to Remove all Permission Sets from Content:

    permission-set_removeAll-view-for-all-active

    Picturepark_Piz-Roseg_Access_Content_Remove-Permission-Set_2023-06-13_15-32-37.mp4

    Expand
    titleDelete a Permission Set

    Delete a Permission Set

    1. Open Content Permission Set or Schema Permission Set

    2. Select your Permission Set

    3. Look for the delete icon 

      Image Modified
    4. Choose delete from the context menu or the toolbar in the browser or detail view

    5. Confirm your desire to delete. 

    VIDEO: How to Delete in the Browser View

    delete_inBrowserAndDetailsPicturepark_Piz-Roseg_Delete-Content-Permission-Set_2023-06-13_15-36-06.mp4

    Expand
    titleDelete Content Assigned to a Permission Set

    Delete Content Assigned to a Permission Set

    To find the Content Items assigned to a Permission Set (Content) you can filter or search in the Content Browser. 

    Filter by label (Content by label)
    showLabelsfalse
    max50
    showSpacefalse
    titleSolutions
    cqllabel = "advanced-search" and label in ( "permission" , "permissionset" ) and space = "SOL"