Devolution server rights management - vault based import/export rights

Devolution server rights management - vault based import/export rights

1 vote

avatar

Hello everyone,

Here is the scenario:

A user has 2 groups, which gives access to multiple vaults.
He is set up as a default user (with write privileges, but without admin-rights).

Group 1 has 1 vault assigned, this is the vault where import/export is enabled
Group 2 has 5 vaults assigned, here import/export is disabled

Unfortunately, when the user has the right to import/export from Group 1, these rights are also ENABLED for Group 2 and their respective vaults, which should not be the case.

At the moment this is a system wide permission, which does not account for the fact, that the user should only be allowed to export/import in one group, but not the other.

We would like to propose a change to this behavior: the system wide permission is fine, but there should be an additional option to enable import/export limited to a specific vault, so that users have the possibility to import/export (into) one vault, but not the other.
At the moment, we use the workaround to set them as vault owners, but this gives users privileges, that they should not necessarily have.

Please let me know, if further information is needed.

Thank you very much in advance.

All Comments (1)

avatar

Hi,

Thanks for the request

I am currently reworking the system permissions to be more granular.
The permissions for import/export, among others like view the deleted entries and managing the vault access, will be available at the vault levels.

Because of the amount of changes required to achieve the permissions rework and making sure all the different platforms are updated to the new permissions,
the forecast for releasing these changes will not be before the version 2026.3.

regards,
David

David Savard