Differences

This shows you the differences between two versions of the page.

--- en:diary:userpermissions [2019/09/16 21:04] – external edit 127.0.0.1
+++ en:diary:userpermissions [2024/10/07 14:33] (current) – Lada Svobodová
@@ Line 3: / Line 3: @@
 The Buildary user permission system is designed to allow very straightforward work on smaller projects with a few members project team. At the same time, it is flexible enough to meet the demands of large corporate customers and project teams of the largest construction sites.
-The Buildary user permission system can be viewed as a two-level system.
+The Buildary user permission system can be viewed as a three-level system.
-** The first level of permissions is at the domain level ** and controls if the user can create new projects and diaries in that domain. The user's permissions are set by the domain administrator.
+** The first level of permissions is at the domain level ** and controls if the user can create new projects and diaries in that domain. The user's permissions are set by the domain administrator. For users working in their personal domain, this level is irrelevant, because, in the personal domain, the user always has all the permissions.
-For users working in their personal domain, this level is irrelevant, because, in the personal domain, the user always has all the permissions.
-** The second level is the construction diary and its entries **. For each construction diary, authorised persons and their roles are listed. The role defines the user's permissions in the diary. This is a level that every diary administrator needs to understand and use properly.
+** The second level of permissions is at the project level ** where company roles and member roles, as well as their permissions on the project site, can be defined for the entire project team.
-===== Project team members =====
-<WRAP 100%>
+** The third level is the construction diary and its entries**. For each construction diary, authorised persons and their roles are listed. The role defines the user's permissions in the diary. This is a level that every diary administrator needs to understand and use properly.
-<WRAP 600px left>
-{{gallery>:en:diary:team_members2.png?direct&600|}}
-</WRAP>
-If you have set up a project and you want to grant access to other users, you must enter them as Project Team Members. This is done in the Project set up window.
-<WRAP info>
-After the user has been added to the project, the invitation email is automatically sent to his/her address. Project team members can enter the project but they still do not have access into any dairy until you add them on the list of the diary authorised persons.
-</WRAP>
-===== Diary authorized persons =====
+====== Domain users ======
-<WRAP 100%>
-<WRAP 600px left>
-{{gallery>:en:diary:authotized_persons3.png?direct&600|}}
-</WRAP>
-If you want a user to access a diary, you must include him/her in the diary authorized person list. The list can be found in Diary identification option. You also need to assign a role to the user. This role gives him the permission to work in the diary.
-The roles are defined in the Team Members Role tab in the Project set up window. The following permissions can be set up:
+On the other hand, it is very important for a company domain administrator to correctly understand and set domain-level permissions.
+Only the employees of your company are added to the domain user list.
+The external users are added only as project team members of a specific project. Not to the domain user list.
-  * ** Diary Administration ** - this permission allows you to edit diary identification data, enter authorized persons, and delete diary (unless it contains signed and closed daily reports).
+{{:en:diary:domain_users_list.png?600|}}
-  * ** Regular Entries ** - this permission allows you to insert, edit, and delete records in the Weather, Labour, Plants, Materials, and Performed Works sections. Mind that you can edit only your own entries and only until the day is locked.
+**Domain users can be granted the following permissions:**
-  * ** Other Entries ** - this permission allows you to insert, edit, and delete records in the Other Entries section. Mind that you can edit only your own entries and only until the day is locked.
+- **Domain Administration** - This permission allows the user to edit domain settings, insert domain users including their permission settings, delete the domain.
-  * ** Documents ** - this permission allows you to insert, edit and delete entries in the Documents sections of the diary identification. This permission covers all four document sections (Project Documents,  Drawings, Inspections and Tests, Other Documents).
+- **Create New Project** - This permission allows the user to create new projects in a given domain.
-You are automatically entered to the authorized person list as a diary administrator after you create a new diary. In addition, you are an owner of the diary. It grants you the same permission as the diary administrator. Diary owner cannot be restricted by deleting or changing his role in the diary.
+- **Administrate Project** - This permission allows the user to edit project information, insert new companies, and team members to the project, create new project diaries but always only on the projects where he is a team member.
+- **All Projects Administration** - This role allows for the configuration of all projects within the domain (regardless of who created them), such as adding organizations, team members, modifying role dictionaries, as well as creating and configuring diaries, editing cover pages, and managing authorized persons from identification details. Assigning this role grants the user read-only access to the daily records. This role does not grant the ability to make daily entries or add supplementary documents, such as basic documents, project documents, inspections, and other paperwork.
+- **All Projects Reader** -Allows access to all diaries within the domain, without the ability to make any modifications.
+The user is automatically written to domain users as an administrator after he/she creates the domain. In addition, he/she becomes the owner of the domain which grants him/her the same permission as a domain administrator. Therefore, deleting a user from domain user list or changing his/her domain permissions can not restrict the domain owner in his/her permissions.
 <WRAP info>
-Any user listed as an authorized person in the diary has full permission to view all diary data regardless of his/her role.
+After you add a user to the domain, an e-mail is sent to his/her address, with an invitation to create an account. The E-mail address is the key to linking the user account and the user in the domain users list. It doesn't make any difference which is created earlier or later.
 </WRAP>
+======Construction Project Users======
-===== Domain users =====
+If you have set up a construction project and want to give access to other users, you must first add them as “Project Team Members.” This can be done in the construction project settings window under the “Project Team” section.
-On the other hand, it is very important for a company domain administrator to correctly understand and set domain-level permissions. Only the employees of your company are added to the domain user list.
-The external users are added only as project team members of a specific project. Not to the domain user list.
-<WRAP 100%>
+After adding a user as a project member, an invitation is sent to their email address.
-<WRAP 600px left>
-{{gallery>:en:diary:domain_users.png?direct&600|}}
-</WRAP>
-Domain users can be granted the following permissions:
-   * ** Domain Administration ** - This permission allows the user to edit domain settings, insert domain users including their permission settings, delete the domain.
+When a user is added as a project member, they gain access to the construction project, but this does not automatically grant permissions to work with the construction diary. These permissions must be assigned by selecting a role that reflects the user’s responsibilities on the project, either during the addition or by editing the project member. The assigned role defines the user’s permissions in the construction diary.
-   * ** Create New Project ** - This permission allows the user to create new projects in a given domain.
+======Diary users======
-   * ** Administrate Project ** - This permission allows the user to edit project information, insert new companies, and team members to the project, create new project diaries but always **only on the projects where he is a team member**.
+If a user is to have access to the diary, they must be added to the "Authorized Persons" list. This is done in the "Identification Details" section of the diary. The user is also assigned a role taken from "Project Members," which you can modify as needed for each diary. The user's rights in the diary are determined by this role.
-The user is automatically written to domain users as an administrator after he/she creates the domain. In addition, he/she becomes the owner of the domain which grants him/her the same permission as a domain administrator. Therefore, deleting a user from domain user list or changing his/her domain permissions can not restrict the domain owner in his/her permissions.
 <WRAP info>
-After you add a user to the domain, an e-mail is sent to his/her address, with an invitation to create an account. The E-mail address is the key to linking the user account and the user in the domain users list. It doesn't make any difference which is created earlier or later.
+If a user is listed as an authorized person in the diary, they have access to view the entire construction diary, regardless of their role. This right is granted by default, and B.O. respects this.
 </WRAP>