Access Controls

Tags: Help, Administration

Note: This page has been replaced. Please continue to the updated and extended help page at https://help.excelwraps.com/support/online-help/help-permissions-model-and-access-control/.

This section sets out how particular users get access to particular information and how permissions are given to control what they can do with the information.

CONTENT ITEMS (web pages, blogs articles etc.) have access controls which grant access to particular roles e.g. managers can only see a webpage containing the telephone numbers of workers but not every user can access this information to protect worker privacy. Access is given to view the content, to edit the content, publish the content and delete the content. Access can be restricted to a single user workgroup then further restrictions can be placed based on user roles. Each content item has an owner (the user that created the content). Another layer of role access controls set permissions applies only if the user owns the content item.

On the right is a sample content item access control (the content item may be a web page or a blog article or indeed a wrap). The settings show that Administrator roles can do anything to this content (view it, edit it, publish and un-publish it or delete it). Managers, Operatives and Supervisors can only view the content. If you are a Supervisor and you own the content (i.e. you created it) then you have permission to edit it.

WRAP GROUPS define access controls and permissions to wraps, wrap instances and MyWraps reports. In Excel we specify which Wrap Group our wrap will belong to using XLW's Wrap Properties button. Wrap Groups can be controlled by site administrators on Dashboard> ExcelWraps> Groups. Access can be restricted to a single user workgroup then further restrictions can be placed based on user roles. Wrap Group access controls are slightly different to other content item access controls (instead of content 'Publish' controls wraps have 'Create' controls to allow creation of new wrap instances). There is also a permission to create wrap instances privately which can only be viewed by the creator, not even administrators can view it. This permission could be use to hold salary information or passwords - things that you do not want to share with anyone.

REMEMBER: use XLW's 'About XLW Subdomain' button to import a new XLW package so that Excel knows what Wrap Groups are available on the site.

MAKING WRAPS ACCESSIBLE TO MANY WORKGROUPS - From Dashboard>ExcelWraps>Definitions you can see what workgroups have access to any particular wrap. Each wrap has an 'Edit' link under the 'Action' column; use this to assign to multiple Workgroups.

TabLock Widgets

In the first instance Dashboard>ExcelWraps>Groups defines what permissions apply to a user role (read, edit, create and delete). In addition you can make further restrictions on each Wrap tab. You set tabs to be read-only for specific roles (TabLockRole widget). You can also make all controls on a tab read-only once a signature has been made, so that once signed further changes to the data cannot be made (TabLockSig widget).

Adding WorkGroup to Specific Wrap Instances

Use the WorkGroupSelector Widget. For example select a WorkGroups containing the tag "TOC" let anyone with the role "Supervisor" add this permission and anyone with the role "Manager" can remove this permission.

=WorkgroupSelector("TOC","Supervisor","Manager")