GroveStreams

Comming Soon - Content Access Security294

MikeMills private msg quote post Address this user
We're about to improve Content Access Security throughout GroveStreams.


Our Access Security design is pretty much the standard across most industries and should be intuitive for many of you.

Details:

1) Everything will be backward compatible. You will not need to change anything. All existing APIs are still supported. Old blueprints are still supported.

2) User Groups: User Groups are new and can contain Users or other Groups.




3) Groups have capabilities associated with them.



4) The "Everybody" group: Every organization will have an "Everybody" group. It is implied that everyone belongs to the "Everybody" group

5) The following objects can now be individually secured:
* Content Folders, Dashboards, and Maps
* Component Folders and Components



6) Users will only see objects that they have access to
* For example, only accessible folders and dashboards will be visible within the studios and within the user's start start page
* Only components and streams will appear within each dashboard for which they have access. For example, a map will only display components and events associated with those components for which the user has access. Ditto for streams in graphs and events within the active event viewer. Stream group membership is also filtered by access rights.
* Items that the user does not have the Capability for, will not be seen: API key manager, stream groups, import, etc.

7) Notifications can be sent to "Groups"

8) Groups and all Access Rights are included within blueprints. Users are not, just like today. Best practice will be to design your organization security around Groups. The design should make adding new users to your organization simple - you just add them to a Group and the proper rights will flow through.

9) Folder Access security will allow for hierarchical Access Rights scenarios. For example, a plant manager can only work with his plant entities, a region manager can work with all of the plants in her region, a district manager can work with all of the regions in his district, and the CEO has access to everything.

10) Object Access Rights will not be available for all GroveStreams subscribers. It will be a feature within a new billing tier. We will be revising our pricing plan at the same time we expose these new security enhancements. More about that soon (there will still be a free tier).

Any feedback is appreciated. It's easier to tweak things now before we release it so please speak up.
Post 1 IP   flag post
jonrichings private msg quote post Address this user
Will there be a level of access, or object constraint that would allow view only of dashboards, no components, no dashboard configuration, no dashboard toolbar, just visibility of a dashboard that is created for them and the ability to select different dashboards?
Post 2 IP   flag post
MikeMills private msg quote post Address this user
Yes. Both in the studios and on the the user's start page.

Many companies, who are designing GS solutions for others, do not want their users to have access to the studios. For them, best practice is to design the dashboards and remove studio capabilities for their users. The users then just view the dashboards they have rights to from their GS start page.

Also, the start page and dashboards viewed from the start page are more phone and tablet friendly than the studios.
Post 3 IP   flag post
jonrichings private msg quote post Address this user
Can't wait! What's the ETA?
Post 4 IP   flag post
MikeMills private msg quote post Address this user
When testing is done. It's a large change. Best guess is 1 to 2 weeks, but could be longer if testing uncovers things we haven't thought of.
Post 5 IP   flag post
jonrichings private msg quote post Address this user
I'm like a kid at Christmas!
Post 6 IP   flag post
jonrichings private msg quote post Address this user
After your little setback, what's the ETA on this upgrade?
Post 7 IP   flag post
MikeMills private msg quote post Address this user
Possibly early next week.
Post 8 IP   flag post
jonrichings private msg quote post Address this user
Woohoo!
Post 9 IP   flag post
MikeMills private msg quote post Address this user
This feature is now live and is a part of the Business Pro plan.
Post 10 IP   flag post
2847 10 10
Log in or sign up to compose a reply.
destitute