No ability to grant permissions to clients
felix-caboff opened this issue · comments
Describe the bug
I had a new member of the team join us recently and we quickly realised they couldn't see old clients/projects. I then had a look around and couldn't find any access-control type options in either the front end or the back end.
To Reproduce
Steps to reproduce the behavior:
- Create a client, project report etc, complete the job
- Add a new user (user level)
- Look for the existing client
- Don't find the existing client
- Don't find any option to share this with the new user
Expected Behavior
The fact that they are not shared by default is probably a good thing, however, there should probably be a sharing mechanism of some description.
Hi @felix-caboff, this is intended with the role-based access controls. A new account like that will not see any clients or projects until they are invited to view one or assigned to one of the projects. An admin can invite someone to view a project or client in the admin console.
The RBAC is broken down here: https://www.ghostwriter.wiki/features/graphql-api/authorization
Not unsurprisingly you are correct! I promise I looked. I just didn't associate "client invites" with what I was trying to do. Thank you!!