Alex Sknarin Posted February 20, 2018 Report Share Posted February 20, 2018 Hello, we found a huge hole in our production. There are number of freelancers in our pipeline. So we made freelander account fo each of them and dashboard with their tasks. Everything is cool - each freelanser could see only his own tasks... BUT: as soon as he clicks on a task, sidebar with its properties appeared, and it has this clickable path... thing... so he could click on a project link (SMALL_PEOPLE in this example) and then he could see EVERYTHING: notes, versions, links, attachments etc. like so: (see - on first picture artist was on some asset but now he could see shots he isn't assigned to) Yeah I found how to disable to edit other entitys, but it is not enough. We've got very restrictive policy in our company about freelancers - they have to be unable to see anything other than their exact tasks. How to set this up? maybe hide this "Linked to" path from some users, or maybe it is possible to disable visibility of unassignet tasks for some users (I haven't found it ((( )? It is actually very serious problem for us, serious enough that our bosses are considering now about droping ftrack entirely from our pipeline if this problem won't be solved in nearest time thank you Link to comment Share on other sites More sharing options...
Mattias Lagergren Posted February 21, 2018 Report Share Posted February 21, 2018 This is as intended, though I understand that it may not be what you expect. You can read more about Permissions and roles in the documentation ASSIGNED role type will only be allowed to perform actions that he/she has permission to perform on assigned tasks. This will also limit the user to only see projects with tasks he/she is assigned to. The assigned role will give a user access to view the tasks within a project she is assigned a task on. The "Can access projects" permission controls if the user should have access to navigate to the "Projects" page in the top menu. There is currently no way to restrict so that a user is unable to view Notes and versions on tasks they are not assigned to within a project which they have permission to see. Quote It is actually very serious problem for us, serious enough that our bosses are considering now about droping ftrack entirely from our pipeline if this problem won't be solved in nearest time Please contact support[at]ftrack.com if you want to discuss this in more detail. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.