Is there any possibility to modify user group rights, that they are able to pause/acknowledge sensors, but not create and move objects?
That is not possible at the moment, sorry. Rights management is limited to the following 4 settings per object in the sensor tree:
|Right||A member of a user group can...|
|none||... not even see an object|
|read||... see an object (including all sub objects)|
... see its status and configuration
|write||... see an object (including all sub objects)|
... see its status
... edit its configuration (except access rights)
... create sub objects
... delete sub objects
|full||... everything of 'write'|
... edit access rights on object level
Note: To delete or create objects you must have at least "write" rights on the parent object.
Thank you for your reply. Is it planned to extend user rights management in future releases?
it is not certain yet. That is all I can say for now, sorry.
Found a workaround:
Access right for all groups and devices = read
Access right for all sensors = write
Users are now available to pause and acknowledge sensors, but not to move them
Does the workaround apply to version 9.2.x as well? I'd like to create a group of users that have the ability to pause/resume/acknowledge sensors or devices, but not be able to create/clone/delete devices or sensors.
this should work for version 9.2 as well but we have not tested it.
I have implemented the rights on 9.2.x. However, the major issue with this method is that the users can not pause/resume a device or group, they can only pause/resume sensors. For example, they get an "Ajax Request Failed PE1001 /api/pause.htm 400 bad request" error when trying to pause at the device level. A similar error happens when they resume.
Really am expecting to see better rights management in the next update. I just don't see the need for my "operators" to have admin rights.
If the users do not have more than read-rights to a device, they cannot pause it. This will most likely not be changed. You do not need to give those users admin rights, but write-rights on those devices.
But if they have write permissions on a device, they can create/delete sensors for a device, which is what we don't want "operators" doing.
I'm afraid then the only option is to mark all sensors on a device and pause them at once.