Easy way to view which assets a user group has permissions for

(Hopkinsd1) #1

Hello,

 

Within my install of Squiz I have a quite a few users groups that contain sets of users that are able to edit individual websites. These user groups are also linked into many other user groups that gives them extra permissions to edit share able content etc.

 

As time has gone on these groups have got quite complex and a simpler solution is needed. However before I can implement a different solution I need to find out for each user group which assets it has 'read', 'write' and 'admin' to.

 

Currently the only way I know how to do this is by manually going through all the assets and checking their 'permissions' screen.  Is there not a simple way to view each user group and see where it has been allocated permissions?

 

Thanks David

(Bart Banda) #2

One way is to create a user and link it to a specific user group. You can then use an asset listing to list all assets they have read/write/admin permission to. That should give you a good idea. You can then move the user between each group and view the asset listing again to see the difference. A good way to find the root node of where the permission is set for each asset is to print the lineage for each asset listed.

 

Hope that helps. 

(Hopkinsd1) #3

Hi Bart,

 

Thanks for the reply. I have started to take a look at this again and am a little confused about how to build the asset listing.

 

If I want to list all the pages that a user group has read/write/admin permissions on how would I go about setting up the asset listing.

 

I'm not sure what I would need to set the root node or the asset types to list to be. 

 

Any help would be appreciated.

 

Thanks

(Bart Banda) #4

Set the root node to the site asset you would like to report on, that could be a good starting point.

 

For asset types, maybe select Pages (inherited) and Abstract Calendar Pages (inherited), that should cover all common page types.

 

Then in the Asset Access to List setting, either use Read/Write/Admin permissions.

 

Then create a user and link them to a user group you want to test, and then preview the asset listing. That should then only list the assets that user group has read, write or admin access to (depending on the setting on the asset listing at the time).

 

Hope that helps.