reapit / foundations

Foundations platform mono repo
57 stars 22 forks source link

App Permissions #6499

Closed roscoe2001 closed 2 years ago

roscoe2001 commented 2 years ago

Within LSL we have a central Hub (in Southampton) who carry out Lettings Property Management for the wider network. We're currently creating an App that will be used within that Hub. When we come to install it with the Marketplace Management App I believe you assign which branch data the App has access to (I know this is done through Branch Groups but in effect you are allocating which branch data the App has access to).

I believe in doing this the App will be installed for any users in these branches.

The problem is we don't want the branches to have access to the App (we just want the Hub users to have access to it) NB we might want the branches to have access to other Apps - just not the ones designed for the Hub.

I think we need a further split : - 1- Which data the App has access to (using Branch Groups) 2- Who has access to the App (using Branch Groups)

Obviously number 2 isn't relevant for integrations.

At the moment I don't know the Foundations setup well enough to know if there is a workaround to the problem (or if I'm missing something).

github-actions[bot] commented 2 years ago

Thank you for raising a feature request. Feature requests will be prioritised in accordance with our roadmap, customer and developer priorities. This request will be reviewed in our weekly refinement sessions and assigned to a specific project board or column, depending on the nature of the request and the development work required. For more information on our processes, please click here

HollyJoyPhillips commented 2 years ago

@roscoe2001 The marketplace management app will allow you to set access for office groups but not individual users of said offices. If you have a limitation or requirement for only certain users from specific branches, this should be set at app/integration level. You can do this in a number of ways, depending on the type of integration. For example, integrations using Reapit Connect, you can check the email address, office, user level etc using the ID Token.

It's worth noting that integrations cannot be launched from AgencyCloud or the AppMarket. The integration will be installed but only users that are aware of the URL will be able to access it.

github-actions[bot] commented 2 years ago

It looks like you have commented on a closed issue. If your comment relates to a bug or feature request, please open a new issue, and include this issue number/url for reference. For more information on our processes, please click here