Hello,
I was attempting to go through the security features of Backendless, but I am a little bit confused.
On the owner policy screen, I can click to get the grey checkmark into 3 different states. Greyed out check, green check, and red X. I can cycle through these. However on the Roles Permissions screen, once I have clicked on a greyed checkmark, I can only cycle between red X and green check. I cannot get back to greyed check. This is confusing.
I am assuming grey check means default behavior. Green check means guarantee this behavior will occur regardless of other layers of permissions, and red x means guarantee this behavior will not occur ?? I know this is wrong because my green check and red x definitions conflict.
Also, what is the default behavior as far as permissions go ?
I want it to be set up so that users can only update and remove data they own but can find all data. Is this default behavior ?
Hi, Alex!
Grey color means that status is ‘inherited’ from its super layer. The highest layer (with the lowest priority) defines default permissions for all tables. You can change these settings at Users -> Security and restrictions tab. Restrictions set at this level would be overriden of you clearly set it on the next level.
Owner policy doesn’t have super level - it is set by default and can be overriden by table or object acl restrictions.
For your purpose I’d recommend to set all global permissions to ‘deny’, and then clearly ‘grant’ owner policy for needed tables.
Best regards,
Alex