topic Re: restrict users from deleting other users knowledge objects in Security

restrict users from deleting other users knowledge objects

kranthimutyala — Tue, 15 Sep 2020 08:06:05 GMT

Hi Everyone,

I need some help in restrict users from deleting other users knowledge objects.Recently one of the user has deleted the alerts which belongs to other team.We need to restrict them in deleting other KO's and they have only the capability of deleting their own and share their KO's globally. All this is related to search and reporting app.

Below is the existing config which we are using currently.Kindly advise me on tweaking the setting to achieve the above mentioned restrictions.

[role_vpn]
accelerate_search = enabled
cumulativeRTSrchJobsQuota = 50
edit_search_schedule_window = enabled
export_results_is_visible = enabled
get_metadata = enabled
get_typeahead = enabled
pattern_detect = enabled
rest_properties_get = enabled
rtSrchJobsQuota = 5
rtsearch = enabled
schedule_search = enabled
search = enabled
srchDiskQuota = 200
srchIndexesAllowed = vpn
srchIndexesDefault = vpn
srchJobsQuota = 20
srchMaxTime = 0

And the permission for search and reporting are as follows.

[]
access = read : [ * ], write : [ * ]
export = none

Thank you.

Re: restrict users from deleting other users knowledge objects

thambisetty — Tue, 15 Sep 2020 08:16:23 GMT

user from the above role role_vpn deleted KO's of other user?

Re: restrict users from deleting other users knowledge objects

kranthimutyala — Tue, 15 Sep 2020 10:56:00 GMT

@thambisetty yes all have write access to search app , we gave write access to enable sharing option , but some users without knowledge are deleting others KOs(including other KOs created by other roles).

The config which I shared is same for all the roles.Any help is highly appreciated.Thanks

Re: restrict users from deleting other users knowledge objects

isoutamo — Tue, 15 Sep 2020 17:40:36 GMT

I propose that you will add separate apps for those groups and then create roles per app. Then all write should be done via those. Personally I don’t like the idea that all users can share KOs globally. Usually this generates more issues than solves those especially when you are using those separate apps and sharing KOs only in app level.
r. Ismo

Re: restrict users from deleting other users knowledge objects

kranthimutyala — Wed, 16 Sep 2020 02:58:32 GMT

@isoutamo Thanks for the reply.Can we update the existing roles where users get the capability to share but not delete the objects of others within search app, rather than creating a lot of new apps for each role

@niketn

Re: restrict users from deleting other users knowledge objects

isoutamo — Wed, 16 Sep 2020 05:06:38 GMT

I don’t think so. If user has the write/modify capability then they can also delete.