daniel.broomall - Wednesday, May 9, 2007 10:04 AM:
I've created 2 custom ItemTypes: TFR and Platforms. Platforms are related to TFRs both as a Property and RelationshipType. When I run as Super User, this works fine (as you can imagine). However, I have something misaligned with the access permissions because when Joe User (who has access to TFRs) tries to select a platform, none of the existing Platforms show in the view.
Any help anyone can offer would be greatly appreciated.
Thanks
RobMcAveney - Wednesday, May 9, 2007 10:29 AM:
Hi Dan -
It sounds like Platforms need to have their own default Permission. You can probably reuse the same Permission you have for TFRs. If that doesn't work the way you want, please provide more info on the use case and we'll work through it.
Regards -
Rob
daniel.broomall - Wednesday, May 9, 2007 3:23 PM:
Rob
Thanks again for your quick response. You are becoming my personal tutor ... I'm sure that's exactly what you had hoped for.
I apparently have done something wrong. I had a permission (New Platforms) created with access levels defined for all users that will be accessing Platforms (either from the TOC or from within my TFR form). That permission was assigned to the Permissions tab of the Platforms ItemType. However, that wasn't working. So, I thought maybe it was a problem with the Permission. I blew that one up and started from scratch. I added only the groups I needed to test the newly created Platforms Permission. From there, I added the Permission to the Permissions tab of the Platforms ItemType and I still couldn't see the information.
So, as the next test, I added the Platforms link to the TOC of my test user and even looking at it natively, those users can't see any of the items I've pre-created. Could it be because my administration account has the Super User Identity and because of that "Joe User" won't have access to the data created? To test this theory, I added a Platform with one of the test users and it could be seen by other test users. I'm not sure if the problem results from adding the information prior to having all of the groups assigned access within the Permission or if it is a problem with using the Super User to enter data. Seems like a lesson to not over use the Super User account, I don't know.
Anyway, thanks again for your time and any guidance you might be able to provide.
RobMcAveney - Thursday, May 10, 2007 11:27 AM:
Dan -
Permissions are not automatically reset when you change the default Permission for an ItemType, since that's not always the desired behavior. Existing items instead retain their existing Permissions until they are reset. You can use the Tools->Admin->Reset Item Access action to reset the Permissions. The users should then be able to see the items. For future reference, you can use Views->Permissions-View on the item window to view the details of that item's Permissions (assuming you have at least Get access or Super User).
Most people do not use the Super User account for normal development work. As you figured out, it can lead to Permission issues later. Instead, use the Innovator Admin account (or create a new one in the Administrators group).
Keep the questions coming -- I'm happy to help.
Rob
daniel.broomall - Thursday, May 10, 2007 1:07 PM:
Rob --
Thanks again for all your help. It's been invaluable. I'm going to remove the Super User Identity from our team accounts and run through the Permissions tools you mentioned.
Again, thanks!
