<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Fri Feb 09 00:40:24 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[UXPROD-4500] Granular permissions: grant permission for each entity/record type</title>
                <link>https://folio-org.atlassian.net/browse/UXPROD-4500</link>
                <project id="10000" key="UXPROD">UX Product</project>
                    <description>&lt;p&gt;&lt;b&gt;Current situation or problem&lt;/b&gt;: Right now, if someone has access to FQM (or Lists), they have access to everything exposed by those modules. This feature is to lock those down a little by adding a new separate permission for each entity/record type, so that users can be given more targeted permissions&lt;/p&gt;

&lt;p&gt;&lt;b&gt;In scope&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;A content permission (one per entity-type) enables access to lists of that entity-type&lt;/li&gt;
	&lt;li&gt;Lack of the content permission prevents access to lists of that entity-type&lt;/li&gt;
	&lt;li&gt;users will be required to have content permission(s) + lists app permission(s) &lt;span class=&quot;error&quot;&gt;&amp;#91;these permissions already exist&amp;#93;&lt;/span&gt; to use the Lists app&lt;/li&gt;
	&lt;li&gt;Limit entity types when creating a list based on content permissions
	&lt;ul&gt;
		&lt;li&gt;Record type dropdown limited by permissions&lt;/li&gt;
		&lt;li&gt;Error/messaging if you don&apos;t have permissions for any entity-type&#160;&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
	&lt;li&gt;On the lists landing page, limit viewing of lists based on content permissions&lt;/li&gt;
	&lt;li&gt;On the lists landing page, limit filtering of entity types based on content permissions&lt;/li&gt;
	&lt;li&gt;Provide an appropriate error message/warning when provided a direct link to a list the user doesn&apos;t have access to&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;&lt;b&gt;Out of scope&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;Permissions per field within an entity-type&lt;/li&gt;
	&lt;li&gt;Unique pairing of lists app permission(s) with content permission(s)
	&lt;ul&gt;
		&lt;li&gt;A single user can&apos;t be provided &apos;view&apos; access for the &apos;items&apos; entity-type and &apos;edit&apos; access for the &apos;loans&apos; entity type.&#160;&#160;&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;&lt;b&gt;Use case(s)&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;&lt;b&gt;Scenario: Content permission enables access per entity type&lt;/b&gt;&#160;&lt;br/&gt;
Given a content permission is available per entity type&#160;&lt;br/&gt;
When a user has the content permission for an entity type enabled&lt;br/&gt;
Then the user can access content* in the Lists app for that entity type&#160;&lt;/li&gt;
	&lt;li&gt;&lt;b&gt;Scenario: Lack of content permission prevents access per entity type&lt;/b&gt;&#160;&lt;br/&gt;
Given a content permission is available per entity type&#160;&lt;br/&gt;
When a user does NOT have the content permission for an entity type&#160;&lt;br/&gt;
Then the user CAN NOT access content* in the Lists app for that entity type
	&lt;ul&gt;
		&lt;li&gt;Example 1: User A has admin permissions for the Lists app (and can view, create, edit, delete and export in the Lists app). User A also has the content permission enabled for the &apos;Users&apos; and &apos;Items&apos; entity types. User A can only view, create, edit, delete and export lists for the &apos;Users&apos; and &apos;Items&apos; entity type - access to &apos;Loans,&apos; &apos;Purchase order lines&apos; or other entity types is prevented.&lt;/li&gt;
		&lt;li&gt;Example 2: User B has viewing permissions for the Lists app. User B has content permissions for the &apos;Loans&apos; entity type. User B can only view lists of the &apos;Loans&apos; entity-type - access to any other entity types is prevented.&#160;&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;&lt;b&gt;Proposed solution/stories&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Links to additional info&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Questions&lt;/b&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="13676">UXPROD-4500</key>
            <summary>Granular permissions: grant permission for each entity/record type</summary>
                <type id="10002" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium">New Feature</type>
                                            <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="10007" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/generic.png" description="Issue is better defined and ready for the development team to review and to estimate issue. Not ready for development to begin implementation. Issue may need to be further refined. The issue is currently being worked on by team (PO and/or dev). (Migrated on 4 Feb 2024 13:41 UTC)">In Refinement</status>
                    <statusCategory id="4" key="indeterminate" colorName="yellow"/>
                                    <resolution id="-1">Unresolved</resolution>
                                                        <assignee accountid="-1">Unassigned</assignee>
                                                                <reporter accountid="5fd3d8ac692b7901101561d2">Kathleen Moore</reporter>
                                    <labels>
                    </labels>
                <created>Fri, 13 Oct 2023 09:57:48 +0000</created>
                <updated>Thu, 25 Jan 2024 12:34:27 +0000</updated>
                                                            <fixVersion>Quesnelia (R1 2024)</fixVersion>
                                        <due></due>
                            <votes>0</votes>
                                    <watches>0</watches>
                                                                    <issuelinks>
                            <issuelinktype id="10010">
                    <name>Continues</name>
                                                                <inwardlinks description="is continued by">
                                        <issuelink>
            <issuekey id="13590">UXPROD-4673</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10008">
                    <name>Defines</name>
                                            <outwardlinks description="defines">
                                        <issuelink>
            <issuekey id="35614">MODFQMMGR-38</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="35614">MODFQMMGR-38</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10145"><![CDATA[Corsair]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i089q0:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10046" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Release</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10079"><![CDATA[Quesnelia (R1 2024)]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    </customfields>
    </item>
</channel>
</rss>