Web Interface - View User: Member of - Read only?

Question

Is there a way to configure the module "Member of" in a "View user"-action as purely read only?

As it stands now we are able to navigate to a seperate viewing page that displays all of the information about the group (including all of its members) just by clicking the name of the group in the module "Member of".

---

Alternatively: Is there a way to turn off the viewing pages for groups completely in a web interface, while keeping the "View user"-action able to work as intented (able to fetch information about users, and the groups they are members of)?

We only want the home page with its defined actions to be accessible for users of this dashboard. And seeing as this dashboards also has other actions that needs write-access to AD, we can't specify purely read-rights via the security role either.

Answer 1

Hello,

Unfortunately, there is no possibility to make groups in the Member Of section non-clickable. At the same time, we are not sure what you mean by we can't specify purely read-rights via the security role either. A security role like below will allow users to see the groups, but not their property values. If this solution does not meet your needs, you can make groups considered to be containers in the particular Web interface. In this case whenever a user clicks a group, they will see something like the following:

Comments

Hi, and thanks for your quick answer.

This doesn't exactly solve our problems with not being able to access different pages other then the Home Page, but the "Container"-trick is satisfactory in the sense that users of the dashboard won't be able to access information about the groups.

We will be moving forward with this approach, thanks!

---

On another note: With your suggested security role-config... Will we be able to see the name of the groups, including its description from AD via collums in "Member of"?

And can we expect to see an option for making "Member of" read-only in a future release of Adaxes?

---

Hello,

Will we be able to see the name of the groups, including its description from AD via collums in "Member of"?

Users will see the group names in the Member Of section and after clicking a group. However, they will not see any properties and will be presented with the The object does not exist message.

As another option, you can configure the Web interface forms for groups to only contain the required properties. This way, no matter of the permissions, they will not see any other property values.

And can we expect to see an option for making "Member of" read-only in a future release of Adaxes?

There are currently no such plans, but we have forwarded the suggestion to the corresponding department for consideration.