Permission system

To keep the permission system of DocSecBox as flexible as possible, the permission structure is divided into the following objects:

graph LR
    B[**Group**
    Sales];
    A1[**User**
    Salesperson 1] ---> B;
    A2[**User**
    Salesperson 2] ---> B;
    C[**Folder**
    Sales];
    B <--- C;
    D1[**File**
    Offer 1]
    D2[**File**
    Offer 2]
    C ---> D1;
    C ---> D2;

Users

People who use the application. Must be created in advance by an administrator with the Management right.

Groups

The object in which people are located. Users and folders are assigned to it. It acts as a link between users and folders.

Folders

The object in which files are located. Groups are assigned to a folder.

Files

A file that can be uploaded to the application. A document is assigned to a folder.

Assignment

By assigning by group, it is first determined which users can see which folders. Initially, they can only see and select these in DocSecBox.

The sum of all folders assigned to them by group is formed.

Possible Use Cases

Group for Individual User

To control the assignment by user precisely, it is advisable to create a separate group for each user. With this group, the folder view can be controlled exactly for this user. This can be easily done with the Wizards in the main menu.

Group for Department

Alternatively, several users can be placed in a group, so a single group can be created for an entire department (e.g., Sales or Accounting).

This ensures that the users of the department always see the same folders. It also saves time, as it does not have to be done per user (as in Group for Individual User).

Group for Customers

If, for example, an external customer is to use DocSecBox, a group and any non-existing users can be created at the same time with the Wizards in the main menu.

Permissions

To now determine what a user can do within the assigned folders, Global Permissions and Folder Permissions are used.

Global Permissions

As the name suggests, these permissions are global. This means that they apply universally in every folder to which the user is assigned.

However, if the permissions should be different for a folder, folder permissions are available.

Folder Permissions

With a folder permission, the user's global permissions can be overridden. This allows more precise control over what the user can do within the folder.

Check Permissions

To really understand which folders the user can see and what permissions the user has within a folder, there is the function: Check Permissions. On the permissions page, a special case with subfolders is also described, which an administrator should be aware of.