dynamicweb / DynamicWeb

Make feature requests for Dynamicweb in Issues section of this repository
https://doc.dynamicweb.dev/documentation/fundamentals/support/feature-requests.html
GNU General Public License v3.0
1 stars 0 forks source link

Impersonation on user group level #34

Open dwlhs opened 6 months ago

dwlhs commented 6 months ago

In DW9 you could configure impersonation relationship between groups. In DW10, this options seems to have been left out, and you can only define relationship on user-to-user and group-to-user. So, if I have a Sales group and a Customers group, and I want everyone in Sales to be able to impersonate everyone in Customers, I would need to add the Customers group to the list of "Groups that can be impersonated" for everyone in Sales, and add the relation ship, when new users are created in Sales. In DW9 I would add the Customers group to the "I can impersonate" list of the Sales group, and I wouldn't need to be concerned about granting impersonation permissions, when adding new users to the Sales group.

Could we have the group-to-group impersonation added in DW10?

ivaigor96 commented 4 months ago

As far as the index goes - if you create a row in the AccessUserSecondaryRelationUserId with group ID on either the left or right side, after you build the index - the impersonation is working. So this is a UI limitation. The question is - can we trust that it will not be removed in the future if we use it (for example from the integration) and will there be UI added to the edit group screen to set which users / group a user group can impersonate ?

nicped commented 4 months ago

https://dev.azure.com/dynamicwebsoftware/Dynamicweb/_workitems/edit/19268