Permissions
Every part of the Broadcast Suite is controlled by a permission. You can see all permissions when you open for example the detail page of a user. The permissions are organized as tree.
Permission States
A permission can have one of three states:
Not set
This is the default case for a permission. If a permission on a group or user is not set, the user has not access to this location or action.
Access
If the permission on group or user is set to access, all users in the authorization tree have access to this location or action.
If you set access to a branch of the permission tree, then all children of this branch are set to access automatically.
You can see this in the example Group A below. View has the access permission and in the preview row Devices and Configuration are also set to access.
Never
If the permission on group or user is set to never, all users in the authorization tree have no access to this location or action.
If you set never to a branch of the permission tree, then all children of this branch are set to never automatically.
You can see this in the example Group C below. Configuration has the never permission and in the preview row Devices, View and all the other actions are also set to never.
Examples
Group A (Can configure Devices)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | ACCESS | ||
| --- Devices | ACCESS | ||
| --- --- View | ACCESS | ACCESS | |
| --- --- Create | ACCESS | ACCESS | |
| --- --- Edit | ACCESS | ACCESS | |
| --- --- Delete | ACCESS | ACCESS | |
| --- --- Duplicate | NO |
Group B (Never delete Devices)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | NO | ||
| --- Devices | NO | ||
| --- --- View | NO | ||
| --- --- Create | NO | ||
| --- --- Edit | NO | ||
| --- --- Delete | NEVER | NEVER | |
| --- --- Duplicate | NO |
Group C (Never on the Configuration node)
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | NEVER | NEVER | |
| --- Devices | NEVER | ||
| --- --- View | NEVER | ||
| --- --- Create | NEVER | ACCESS | |
| --- --- Edit | NEVER | ||
| --- --- Delete | NEVER | ||
| --- --- Duplicate | NEVER |
User Bob
User Bob is associated with the Group A. He gets all the permissions from Group A. Bob's permissions looks like this:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | ACCESS |
| --- --- Duplicate | NO |
He can view all devices, can create a new one, can edit devices and can delete devices.
User Max
User Max is associated with Group A and Group B. He gets all the permissions from Group A and Group B. Max's permissions looks like this:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | NEVER |
| --- --- Duplicate | NO |
Max can view all devices, can create a new one and can edit devices. He cannot delete a device, because the Never flag of Group B overrides the Access from Group A.
User Lisa
User Lisa is associated with the Group B, and she has her own permission configuration.
Lisa's permission configuration:
| What | Preview | Access | Never |
|---|---|---|---|
| Configuration | ACCESS | ||
| --- Devices | ACCESS | ||
| --- --- View | ACCESS | ACCESS | |
| --- --- Create | ACCESS | ACCESS | |
| --- --- Edit | ACCESS | ACCESS | |
| --- --- Delete | ACCESS | ACCESS | |
| --- --- Duplicate | NO |
Lisa's effective permissions:
| What | Preview |
|---|---|
| Configuration | ACCESS |
| --- Devices | ACCESS |
| --- --- View | ACCESS |
| --- --- Create | ACCESS |
| --- --- Edit | ACCESS |
| --- --- Delete | NEVER |
| --- --- Duplicate | NO |
Lisa can view all devices, can create a new one and can edit devices. She cannot delete a device, because the Never flag of Group B overrides the Access from her own Permission configuration.