Hi Dilini,

On Fri, Jun 10, 2016 at 9:38 AM, Dilini Gunatilake <[email protected]> wrote:

> Hi Tanya/Megala,
>
> Can't we share the anonymous view with other tenants as a normal view?
>
We have only a dashboard sharing option as per now but not view sharing
option.


> In that case if a particular user gets a waning as you said at the time of
> sharing, the user can create an anonymous view without those restricted
> gadgets and share the dashboard with other tenants. Then, those tenant
> users will be able to view the dashboards as explained in the above doc[1].
> Just an opinion.
>
Also anon view is for any non logged in users and we don't have to
explicitly share it across tenants.

>
> Also, I think hiding gadgets won't work because it will introduce
> unnecessary complications in re-arranging the template. If the restricted
> gadget is in the middle of the template we can't keep a blank space in the
> middle rather re-arrange it in a suitable way.
>
As I have explained in my previous reply,  actual issue here is we are not
aware of the existing roles in each tenant to hide a gadget based on gadget
level permissions.

Thanks,
Tanya

>
> Regards,
> Dilini
>
> On Thu, Jun 9, 2016 at 10:27 AM, Tanya Madurapperuma <[email protected]>
> wrote:
>
>> To add into what Megala has explained..
>>
>> We decided the above approach due to below reasons.
>>
>>    1. In the gadget listing page of the designer mode, we list only the
>>    intersection of the gadget that are authorized for the logged in user and
>>    restricted viewers of that particular view. So if we warn the dashboard
>>    creator saying "you have added a restricted gadget, if you share or
>>    planning share this dashboard across tenants, those gadget will be shown 
>> to
>>    the tenant users" at the time of adding a new gadget to the dashboard, he
>>    will be frustrated if he doesn't want to share this dashboard. So we
>>    skipped that option.
>>    2. We decided* only to warn* the user at the time of sharing the
>>    dashboard rather than hiding those gadgets in tenants view, because say a
>>    particular gadget is restricted only for Role1 in super tenant. There can
>>    be a role with the same name in another tenant which serves a different
>>    purpose. So blindly we can't hide gadgets in tenant mode based on the role
>>    specified in the gadget.
>>
>> Thanks,
>> Tanya
>>
>> On Thu, Jun 9, 2016 at 10:09 AM, Megala Uthayakumar <[email protected]>
>> wrote:
>>
>>> Hi All,
>>>
>>> We have created a new feature for DS which allows the dashboard created
>>> from super-tenant to be shared among all the tenants. For more information,
>>> please refer to documentation at [1]. With the new release we are going to
>>> introduce fine-grained permission for gadgets. So that, gadgets' access can
>>> be restricted using roles. In that case, when we share the dashboards
>>> across tenants the gadgets with role restriction will not be shown as roles
>>> are limited to each tenant.
>>>
>>> But if we think this from the point-of view of the user, who is willing
>>> to share the dashboard, he/she will expect tenants to have the same level
>>> functionality in the view mode.In order to solve this problem, we have
>>> come up with following option.
>>>
>>> When a super-tenant user tries to share the dashboard, we will give a
>>> warning saying, this set of gadgets in this dashboard are restricted to
>>> these roles. If he/she share the dashboard, then it will be shown to all
>>> other tenant users regardless of role of the user. Then it is user`s
>>> decision on whether to share/not to share the dashboard.  WDYT ?
>>>
>>> Any comments on this is highly appreciated.
>>>
>>> [1]
>>> https://docs.google.com/a/wso2.com/document/d/1JjB0Ehf6LzJ13krLwN3vo3fLVU4AHQevBtfzN8XqZ70/edit?usp=sharing
>>>
>>> Thanks.
>>>
>>> Regards,
>>> Megala
>>> --
>>> Megala Uthayakumar
>>>
>>> Software Engineer
>>> Mobile : 0779967122
>>>
>>
>>
>>
>> --
>> Tanya Madurapperuma
>>
>> Senior Software Engineer,
>> WSO2 Inc. : wso2.com
>> Mobile : +94718184439
>> Blog : http://tanyamadurapperuma.blogspot.com
>>
>> _______________________________________________
>> Architecture mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>
>>
>
>
> --
>
> *Dilini GunatilakeSoftware Engineer - QA Team*
> Mobile : +94 (0) 771 162518
> [email protected]
>
> _______________________________________________
> Architecture mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>


-- 
Tanya Madurapperuma

Senior Software Engineer,
WSO2 Inc. : wso2.com
Mobile : +94718184439
Blog : http://tanyamadurapperuma.blogspot.com
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to