Multi Tenant usuage

gabriel

Yes of course. You can use policies to define and strictly control, who can see/update what and when.

Policies can be simple or very complex, depending on what rules and access permissions you want to apply. But it also depends on if you are building your own apps or using apps from the repository. If it´s the former than you can freely define and build as you need. If it´s the latter, it kinda depends on the pre-existing access & permission system in those apps.

Zanders

gabriel so for example could I assign him a company, and all he can do is assign tasks projects to that one company, and assign people to that task only from within said assigned company?

gabriel

If its your own apps, yes you can freely choose any definition of what anyone can see or do.

Zanders

gabriel it’s for the default contacts and tasks

gabriel

If it´s the existing apps, they have their own defined permission system. Tasks for example cannot be accessed by others, unless assigned to them (excuted by), or shared (share with department/team), and so on.

You will have to decide if the existing permission system works for your purposes. If not, you could request specific options and we can take a look at them.

For this, please familarize yourself with the different access options (see the app and its help pages) and then state the type of access permission that is lacking.

Zanders

gabriel Being able to select Tasks = Use with a filter to select only certain things for example user abc@company1.com can only select company1 from the organisation dropdown aka only assign tasks to the company1 org.

gabriel

Zanders Being able to select Tasks = Use

Sorry, but I do not understand what this means. Please explain in detail or share some screenshots.

If you ask for changes to task assignment / access permissions, you need to go into more detail. Such as: "Tasks should be accessible to members of selected teams that a task owner can choose from" or "Tasks should be accessible to colleagues, if they are defined as substitute for the current task owner, the owner is currently absent and the task allows for substitution". Both these options, as well as many others, are currently in the app.

Zanders

I want to give a client of mine access to sign in to REI3. I want that client and any of their team to be able to add tasks to the tasks app. but I wan them to not be able to select to add a task to any other company except the company they are connected to.

If user1 is at company1 and he signs in he can create tasks for company1 but cant click the 'related to organisation' and select an org that isnt company1.

gabriel

The fields "Related to organization" and "Involved organization contacts" only serve as information, they currently have no influence on any access permission or who can see what task.

Do you want to use these fields to affect access permissions, or do not want your external users to see other organizations?

Zanders

I want to give access to a user and only give him the ability to see certain organisations in the drop down.

I want to give access to to my client to be able to log tasks in the system, but only for their organisation.

gabriel

Unfortunately, there is a misunderstanding on how this feature works. It does not log tasks for organizations. It is meant for internal reference for people working on the same tasks.

Limiting the dropdown will not do what you want as it will not limit access to tasks or make them available to different people.

The REI3 Tasks app was built for open collaboration between team members. It could be extended to address your use case, but it would take a lot of work as it would require a new permission system.

In this case it would be much less work to create a new app that was designed for this use case. A simple task managing app that would work as you describe would take maybe 6-8 hours. Redesigning the REI3 Tasks app to also address your use case would take a couple of days.

Zanders

gabriel thank you for your honest feedback! I sadly don't have the understanding or skills to be able to do such a thing.

gabriel

If you have a business case for this, you might consider spending the money to have this created for you. Besides other things, we also offer custom app development for organizations.

Zanders

As I said all the clients I work with are charities / non-for-profits we make enough cash to keep the lights on 50% of the time and self fund the rest. I wanted to try and avoid setting them up their own instance to track their own tasks. hence wanting to add them into my instance and adding tasks in there.

I will create an instance of REi3 for them and just have to keep an eye on both systems.

gabriel

Sorry, I forgot about your background in charity work. Lot´s of different names and people to keep track of. Hope things work out.

Zanders

gabriel îs it possible to export a copy of lsw_tasks and rename the name, uuid and short name, id etc and export it back in so I can customise it?

Zanders

As I cant lock it down to certain things, I am wondering if I can use a copy of tasks, change its data bits to store the organisations separately etc.

I did realise I can make a custom role and remove write access to the Organisation section of tasks which works well. but I cant disable/mark owner as read only as it stops them being able to view the task they create for whatever reason. it does assign them as owner.

gabriel

Zanders
No, there is no option to copy existing apps. In the case of REI3 Tasks, I would guess that it would be less work to create a new tasks app then it is to change the current permission system to work the way you described. And if you can do one you should be able to do the other. You might be overestimating how difficult it is to create an app like this.

Zanders Also is there no way to bypass and allow unsigned apps for testing?

Every app is signed by some key, depending on what the author chooses during export; there are no unsigned apps. There is no need for bypassing, as you can create/use your own keys as long as you register your public key in the admin panel (system -> repository -> trusted key management).

Zanders

Also is there no way to bypass and allow unsigned apps for testing?