privacy - scheduler show label details without ressource permissions about app HOT 3 OPEN

I believe you are correct, the resource permissions are not checked when filling the slots in the schedule view. From what I can gather, especially from our usage, the settings to show/hide that information, only allow to control if guest/registered can see them or if only the admin can see it, there's no in-between. Ideally the resource permissions would be checked so that those items would be auto-hidden from a user without permissions.
In our usage case, we set the permissions so that only the admin could see them (hide.reservation.details = true and hide.user.details = true) and we also added some of our inventory behind groups/schedules, to which people get added manually, afterwards they can then see/reserve those items, so using this technique we have avoided needing to control individual resources permissions.

It certainly is an incomplete implementation of the permissions system and as such it will probably need a bit of a dive into to the code to add that missing feature. I won't make promises of when I can add this, but I will keep it in mind and also mark it as an enhancement so I don't overlook it.

PS I almost forgot, there's also a setting for each resource that controls whether a user receives permissions to it automatically "Permission is automatically granted", so if you don't want users to have that access granted immediately, take a look at that setting

from app.

Hi,
I assumed that this would need a deeper dive into the code.
The Option Permission is automatically granted was already switched off in my systems.
Actually we're using only the user groups to grant permissions.

Nevertheless Thank You

from app.

Hi,

I ran into the same problem today but was able to to find a possible workaround.

lib/Application/Authentication/RegistrationPermissionStrategy.php

contains:

class RegistrationPermissionStrategy implements IRegistrationPermissionStrategy
{
    public function AddAccount(User $user)
    {
        $autoAssignCommand = new AutoAssignPermissionsCommand($user->Id());
        ServiceLocator::GetDatabase()->Execute($autoAssignCommand);
    }
}

I commented out the database execution; otherwise the user creation will always add default permissions for all resources, thus showing up for the newly registered user.

I now can assign users from the default group into a suitable other group that has permission for specific devices - the permissions are correctly updated.

I hope this helps.

Cheers,

Tobias

from app.