test

Permissions and Access Control

Summary of IU Changes: At IU, we support many different portfolio projects and each project leader has rather specific requirements for restricting or opening access to individuals cells and the actions available therein. In modifying the permissions structure of the Matrices tool, we've tried to accommodate a wide range of access scenarios from open and collaborative to locked-down and private. Several mechanisms are used to determine what each user can see and do within a matrix.

1. Tool and Matrix-level Permissions: In addition to the tool-level permissions, which have always been available, each matrix has its own permissions. The tool level permissions are primarily concerned with matrix authoring and management, whereas the permissions associated with a specific matrix determine what each role can do within the matrix.
2. Groups: Groups determine which names are displayed in the "Select User" drop down menu. By default, users with permission to view the member only see users in their own groups. This restriction can be turned on or off on a per role/per matrix basis via the "Can view all groups" permission.
3. Cell-level settings: Permission and group settings affect the entire matrix, but for some projects, it's important to be able to control access and behavior in specific cells. As an example, we support several projects where evaluators and reviewers are only permitted to view those cells and students to which they've been assigned. We accommodate the need to enable/disable access or specific actions on a per cell basis via cells specific settings.

Tool Permissions

IU Branch

Figure 1: Matrix Tool Permissions, IU

OSP 2.6

Figure 2: Matrix Tool Permissions, OSP 2.6
Matrix-Specific Permissions

IU Branch

Figure 3: Matrix-Specific Permissions, IU