Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
Description
I have a few Normal Users in my deployment who's access is controlled by Roles. The Roles are configured to allow access by Entity Group. The Role Members have access to entire Entity Groups, but in their view of the interface, the "Groups" menu item under devices is missing. Since users have access to multiple groups, it would be nice to retain the ability to see the different device groups in the devices menu. As it stands they can only see the complete list of all devices that are members of these groups.
We limit access to groups because the interaction between the group code and the permissions code would be quite messy since groups can comprise entities not covered by the permissions system and it would likely be very slow the try to figure out which groups to show across all entity types, and displaying the rules to build the groups and even just the names of groups seemed like an information leak.
Because of these reasons we decided to just limit visibility of the group system to global read users.