https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146459#M4495 <P>Right, I don't want global effect, I want them to stay within the app, just not restricted to the current user.</P> Wed, 10 Jun 2015 19:18:40 GMT rjdargi 2015-06-10T19:18:40Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146455#M4491 <P>Right now, when a user creates a new view or saved search, it defaults to Private. Only users with the "admin" role can change these permissions.</P> <P>Is there a way to change the default behavior so that all users get R/W permissions on views and saved searches?</P> Tue, 09 Jun 2015 18:49:58 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146455#M4491 rjdargi 2015-06-09T18:49:58Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146456#M4492 <P>Yes, you do this with <CODE>default.meta</CODE>; read about it below in the "Make objects globally available" section:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/AdvancedDev/SetPermissions">http://docs.splunk.com/Documentation/Splunk/6.2.3/AdvancedDev/SetPermissions</A></P> Tue, 09 Jun 2015 18:55:25 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146456#M4492 woodcock 2015-06-09T18:55:25Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146457#M4493 <P>I've attempted to do that, I've added the following to my default.meta. It doesn't seem to work, as new or cloned views still have "Sharing" set to "Private". I want them to be shared with the App itself. Am I doing this wrong?</P> <PRE><CODE># This should at least do views. [views] access = read : [ * ], write : [ * ] # This should handle all objects, right? [] access = read : [ * ], write : [ * ] </CODE></PRE> Wed, 10 Jun 2015 18:13:45 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146457#M4493 rjdargi 2015-06-10T18:13:45Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146458#M4494 <P>You need to add <CODE>export = system</CODE> to each stanza for global effect.</P> Wed, 10 Jun 2015 18:24:16 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146458#M4494 woodcock 2015-06-10T18:24:16Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146459#M4495 <P>Right, I don't want global effect, I want them to stay within the app, just not restricted to the current user.</P> Wed, 10 Jun 2015 19:18:40 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146459#M4495 rjdargi 2015-06-10T19:18:40Z https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146460#M4496 <P>That should do it.</P> Wed, 10 Jun 2015 20:26:02 GMT https://community.splunk.com/t5/Security/Set-default-permissions-to-quot-all-quot-for-new-views-and-saved/m-p/146460#M4496 woodcock 2015-06-10T20:26:02Z