Skip to main content

Permissions

This feature of the Asset Manager is only available if the logged-in user has the Administrator role.

Permissions within the Asset Manager are used to control access to data. Data that can be created, edited, or deleted exists only in tables, since data from queries or web pages cannot be modified per se.

Exception: The Access denied permission can be applied to all objects within the navigation tree. In this case, the corresponding object, including its “child objects,” is not visible.

Permissions are always assigned at the group level. Permissions are not inherited within the navigation tree. Possible permissions are:

  • Read-only (0): Data can be read.
  • Create/Update (1): Data can be read, created, or updated.
  • Full Control/Delete (2, default): Data can be read, created, updated, or deleted.
  • Access denied (256) : An object is not visible (including all “child objects”). Access denied is the strongest permission, which overrides all other permissions.

If a user is a member of multiple groups with different permissions, the highest permission always takes precedence (see the red text in the list above). Access denied therefore has a higher priority than Full Control or Delete and takes precedence when both are applied simultaneously. The following screenshot, which shows a user's effective permissions, illustrates this rule:

am-effective-permissions.png

The following video demonstrates how permissions are assigned and how they affect tables.

Starting with version 4.5 of Asset Manager, permissions can be manually inherited. This is done via the context menu in the navigation tree.

For that the following functions are available at the folder level:

  • Inherit permissions. Recursively inherits all existing permissions to all objects located below the folder.
  • Delete propagated permissions. Recursively deletes all permissions in all objects below the folder.
  • Delete permissions. Deletes all permissions for the current folder (without recursion).

The following functions are available at the object level:

  • Inherit permissions. Inherits all permissions from the parent folder.
  • Delete permissions. Deletes all permissions for the current object.

Back to top