Permission System "ACL"

In NET Cloud, permissions were previously managed primarily through lists of restricted users or based on the users' organization. This functionality has been replaced by a role-based permission system as of version 24.11.6.0.

The permission system in NET Cloud is available to users in the administration area of each project. It can be accessed through the "ACL" tab in the project settings.

Screenshot 2024-11-06 145747.png

The permission system is group-based: each group has specific permissions and restrictions within the project. Each user can be assigned to one or more groups and will automatically receive the permissions associated with the respective group(s).

Create New Group

The interface provides a clear list of all groups within the project. By clicking the "Create New Group" button, a new window opens, allowing you to set up a new group.

In this window, a new group can be created by setting a name and description for the group. Additionally, the "Clone Existing Group" feature allows you to copy the settings of an existing group.

Add User

To quickly and easily assign permissions to a new user for a specific project, use the "Add User" button. This opens a new window where the user can be assigned to a specific group.

At the top of the window, you can select the desired group to which the user should be added.

In the next step, the user can be found using the search field. It is possible to select multiple users from the list and then add them to the chosen group with a click on "Save." The users are now successfully assigned to the group.

Managing and Editing Groups

In the view where groups are listed, the administrator has several management options available.

By clicking the small arrow on the left side of the table, a list of all users belonging to that group can be displayed. The "Remove User" button allows users to be quickly and easily removed from the group.

On the right side of the table, the administrator can use the "Edit" button to adjust the group’s access levels. This allows the administrator to specify precisely which permissions the group has within the selected project.

In the displayed table, checkboxes allow precise control over the permissions assigned to the group for each layer available in the project.

The options include Read, Insert, Edit, Delete, Execute, and specific permissions for NET Scan. Orange arrows indicate whether a setting in the checkbox overrides another permission or is overridden by a permission at a lower level.

Permissions can be customized down to the attribute level, allowing for highly individualized adjustments. For example, a user might be granted read access to a specific layer while certain attributes remain hidden.

If a layer is configured as "ReadOnly," the checkbox for write permissions will be grayed out and unclickable.

This example illustrates the principle clearly. The top checkbox allows you to set whether the entire group in this project has the "Insert" permission. The orange triangle with the downward arrow indicates that this setting does not apply to all layers. This may be because the permission has been revoked or set to "ReadOnly" for some layers. The checkbox below is grayed out, meaning the layer is configured as "ReadOnly" in its settings. The arrow of the triangle points upwards because this setting overrides a higher-level setting (the checkbox directly above it). Therefore, the global setting for the right to insert values in this project does not apply to this layer.

Once the settings are complete, they can be saved using the "Save" button. If the settings are unsatisfactory, they can be discarded by clicking the "Cancel" button.