Regarding Access Control

Parasmoni

I wonder if it is possible to create Access Roles in a manner so that a user can edit only a specific collection of objects, and can not change objects of other collections?

darrigan

Hi,

when you edit a Collection, go to Access in the left menu, between Summary and Log. There, you have access control and you can give some rights to a specific group, or user.

Parasmoni

Hi darrigan , here is my screenshot of collection-editing page. I could find nothing between Summary and Log on the left panel.

darrigan

Oh! Yes, you have to activate this function to use it.

In the app.conf, go to this part:

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~# _____ _ _ # /\ / ____| | | | |# / \ ___ ___ ___ ___ ___ | | ___ _ __ | |_ _ __ ___ | |# / /\ \ / __/ __/ _ \/ __/ __| | | / _ \| '_ \| __| '__/ _ \| |# / ____ \ (_| (_| __/\__ \__ \ | |___| (_) | | | | |_| | | (_) | |# /_/ \_\___\___\___||___/___/ \_____\___/|_| |_|\__|_| \___/|_|# # Structural mechanisms that control who can see what, and how (optional).# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Set this variable to 1:

# -------------------------# Item-level access control# -------------------------perform_item_level_access_checking = 1

And:

ca_collections_acl_inherit_from_parent_default = 1ca_objects_acl_inherit_from_ca_collections_default = 1ca_objects_acl_inherit_from_parent_default = 1

And:

ca_objects_access_inheritance_default = 1

Parasmoni

Thank you very much darrigan , it has worked now.

Nicolás

Hi, I have been reading this post and I have a question with a similar topic. I can successfully activated the access control and applying it for object and entities, but I can not apply it for occurrences. Save Read/edit access, Read-only access and No access occurrence configurations in Source does not work. Can do you help me to troubleshooting mi problem?

seth

I just tested and confirmed item-level ACL for occurrences is working. What, exactly, happens when you try to use ACL on occurrences? And what version of CA are you running?

Nicolás

Changing the selection to read/edit access, read only access, or no access on Source occurrences does not work. Changes are not saved. It seems that another setting forces occurrence setting on another selection, which is not what I need. I am currently running CA version 1.7.17.

-----------------------------------

Type-level access control

-----------------------------------

perform_type_access_checking = 1
default_type_access_level = CA_BUNDLE_ACCESS_EDIT

-----------------------------------

Source-level access control

-----------------------------------

perform_source_access_checking = 1
default_source_access_level = CA_BUNDLE_ACCESS_EDIT

-----------------------------------

Item-level access control

-----------------------------------

perform_item_level_access_checking = 1
default_item_access_level = CA_ACL_EDIT_DELETE_ACCESS

You can control item-level access control support

for each type of item using these directives

ca_objects_dont_do_item_level_access_control = 0
ca_object_lots_dont_do_item_level_access_control = 0
ca_entities_dont_do_item_level_access_control = 0
ca_places_dont_do_item_level_access_control = 0
ca_occurrences_dont_do_item_level_access_control = 0
ca_collections_dont_do_item_level_access_control = 0
ca_lists_dont_do_item_level_access_control = 0
ca_list_items_dont_do_item_level_access_control = 0
ca_loans_dont_do_item_level_access_control = 0
ca_movements_dont_do_item_level_access_control = 0
ca_object_representations_dont_do_item_level_access_control = 0
ca_representation_annotations_dont_do_item_level_access_control = 0
ca_storage_locations_dont_do_item_level_access_control = 0
ca_tours_dont_do_item_level_access_control = 0
ca_tour_stops_dont_do_item_level_access_control = 0

Defaults for collection-to-object ACL inheritance settings

Set to 1 to make default to inherit; 0 for default to be no inheritance

ca_collections_acl_inherit_from_parent_default = 0
ca_objects_acl_inherit_from_ca_collections_default = 0
ca_objects_acl_inherit_from_parent_default = 0