Permissions
Every part of the Broadcast Suite is controlled by a permission. You can see all permissions when you open for example the detail page of a user. The permissions are organized as tree.
Permission States
A permission can have one of three states:
Not set
This is the default case for a permission. If a permission on a group or user is not set, the user has not access to this location or action.
Access
If the permission on group or user is set to **access **, all users in the authorization tree have access to this location or action.
If you set access to a branch of the permission tree, then all children of this branch are set to access automatically.
You can see this in the example Group A below. View has the access permission and in the preview row Devices and Configuration are also set to access.
Never
If the permission on group or user is set to **never **, all users in the authorization tree have no access to this location or action.
If you set never to a branch of the permission tree, then all children of this branch are set to never automatically.
You can see this in the example Group C below. Configuration has the never permission and in the preview row Devices, View and all the other actions are also set to never.
Examples
Group A (Can configure Devices)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | ACCESS | ||
| --- Devices | ACCESS | ||
| --- --- View | ACCESS | ACCESS | |
| --- --- Create | ACCESS | ACCESS | |
| --- --- Edit | ACCESS | ACCESS | |
| --- --- Delete | ACCESS | ACCESS | |
| --- --- Duplicate | NO |
Group B (Never delete Devices)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | NO | ||
| --- Devices | NO | ||
| --- --- View | NO | ||
| --- --- Create | NO | ||
| --- --- Edit | NO | ||
| --- --- Delete | NEVER | NEVER | |
| --- --- Duplicate | NO |
Group C (Never on the Configuration node)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | NEVER | NEVER | |
| --- Devices | NEVER | ||
| --- --- View | NEVER | ||
| --- --- Create | NEVER | ACCESS | |
| --- --- Edit | NEVER | ||
| --- --- Delete | NEVER | ||
| --- --- Duplicate | NEVER |
User Bob
User Bob is associated with the Group A. He gets all the permissions from Group A. Bob's permissions looks like this:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | ACCESS |
| --- --- Duplicate | NO |
He can view all devices, can create a new one, can edit devices and can delete devices.
User Max
User Max is associated with Group A and Group B. He gets all the permissions from Group A and Group B. Max's permissions looks like this:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | NEVER |
| --- --- Duplicate | NO |
Max can view all devices, can create a new one and can edit devices. He cannot delete a device, because the Never flag of Group B overrides the Access from Group A.
User Lisa
User Lisa is associated with the Group B, and she has her own permission configuration.
Lisa's permission configuration:
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | ACCESS | ||
| --- Devices | ACCESS | ||
| --- --- View | ACCESS | ACCESS | |
| --- --- Create | ACCESS | ACCESS | |
| --- --- Edit | ACCESS | ACCESS | |
| --- --- Delete | ACCESS | ACCESS | |
| --- --- Duplicate | NO |
Lisa's effective permissions:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | NEVER |
| --- --- Duplicate | NO |
Lisa can view all devices, can create a new one and can edit devices. She cannot delete a device, because the Never flag of Group B overrides the Access from her own Permission configuration.