OX Permission Level: Difference between revisions

From Open-Xchange
 
(31 intermediate revisions by 7 users not shown)
Line 1: Line 1:
{{VersionTo|7.4.1}}
''Note: This represents the state of OX6 and AppSuite until v7.4.1. For the newer implementation, see [[AppSuite: Permission Level]].''
= OX Permission Level Matrix=
= OX Permission Level Matrix=


OX HE/SE allows to provide different permission levels to the users.  
OX HE/SE/App Suite allows to provide different permission levels to the users.  


The levels start with pure webmail-only functionality and end with the full featured groupware product including all connectors and are described in the first table.
The levels start with pure webmail-only functionality and end with the full featured groupware product including all connectors and are described in the first table.


* '''Webmail''' contains pure webmail functionality including a private addressbook
* '''Webmail''' contains pure webmail functionality including a private addressbook
* '''PIM''' (Private Information Management) adds private calendar and private tasks, no group or sharing capabilities are available
* '''PIM''' (Private Information Management) adds private calendar and private tasks, no group or sharing permissions are available
* '''PIM + Mobility''' adds mobile synchronisation to the PIM level
* '''PIM + Mobility''' adds mobile synchronisation to the PIM level
* '''PIM + InfoStore''' adds private InfoStore functionality to the PIM level
* '''PIM + InfoStore''' adds private InfoStore functionality to the PIM level
* '''Groupware Standard''' includes all group and sharing capabilities as well as the InfoStore
* '''Groupware Standard''' includes all group and sharing permissions as well as the InfoStore
* '''Groupware Premium''' adds all external connectors and mobile synchronisation to Groupware Standard
* '''Groupware Premium''' adds all external connectors and mobile synchronisation to Groupware Standard


In addition to this levels, OX HE/SE contains several functions, which can flexible be used with every level. This functions are described in the second table.
In addition to this levels, OX HE/SE/App Suite contains several functions, which can flexible be used with every level. This functions are described in the second table.
 




Line 22: Line 25:
!  !!  Definition
!  !!  Definition
|-
|-
| '''Mandatory''' ||  This column defines the options, which must not be changed for this level
| '''Mandatory''' ||  This column defines the options, which must not be changed for this level. '''This is a technical requirement and necessary for the correct functioning of OX HE/SE/App Suite'''
|-
|-
| '''Default''' ||  This column lists the options, which are activated per default for this level
| '''Default''' ||  This column lists the options, which are activated per default for this level
Line 34: Line 37:
|style="background-color:#C0C0C0" |  || Fields in this color define the most important differentiator to the next lower level
|style="background-color:#C0C0C0" |  || Fields in this color define the most important differentiator to the next lower level
|}
|}
<br>
<br>


== Matrix - Permission Levels ==
== Matrix - Permission Levels ==
Line 43: Line 44:
{|
{|
|-
|-
! OX Base Levels  !!  Functionality !!  !! Default !! Requirements / Description !! &nbsp; !! API Parameter
! OX Base Levels  !!  Functionality !! Mandatory (technical requirement) !! Default !! Requirements / Description !! &nbsp; !! API Parameter
|-
|-
| rowspan="2" | '''Webmail'''
| rowspan="2" | '''Webmail'''
Webmail only  
Webmail only  
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp;|| &nbsp;|| webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp;|| &nbsp;|| webmail
|-
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|-
|-
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
|-
|-
| rowspan="5" | '''PIM'''<br>Private use only<br>No sharing, no group functions.  
| rowspan="5" | '''PIM'''<br>Private use only<br>No sharing, no group functions.  
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || rowspan="3" | The absence of other features defines this level || &nbsp; || webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || rowspan="3" | The absence of other features defines this level || &nbsp; || webmail
|-
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || contacts
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || contacts
|-
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || calendar
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || calendar
|-
|-
|Global Addressbook  || [[File:Optional.png]] || || &nbsp;|| &nbsp; || globaladdressbookdisabled
|Global Addressbook  || &nbsp; || [[File:Cross_gray.gif]] || &nbsp;|| &nbsp; || globaladdressbookdisabled
|-
|-
|Tasks  || [[File:Optional.png]]  || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|Tasks  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|-
|-
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; ||&nbsp;
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; ||&nbsp;
|-
|-
| rowspan="9" | '''PIM + Mobility'''<br>Private use only<br>No sharing, no group functions<br>Enabled for mobile synchronization  
| rowspan="9" | '''PIM + Mobility'''<br>Private use only<br>No sharing, no group functions<br>Enabled for mobile synchronization  
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp;|| &nbsp; || contacts
|-
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|-
|-
|style="background-color:#F0F0F0" | USM ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || Technical Requirement || &nbsp; || usm
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|-
|-
|style="background-color:#C0C0C0" | Active Sync ||style="background-color:#C0C0C0" | [[File:Optional.png]] ||style="background-color:#C0C0C0" | [[File:check.gif]]  || rowspan="3" | This defines the level<br>At least one of these needs to be set<br>Typically "Active Sync"|| &nbsp; || activesync
|style="background-color:#F0F0F0" | USM ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || &nbsp; || usm
|-
|-
|style="background-color:#C0C0C0" | Mobile App ||style="background-color:#C0C0C0" |  [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || tbd
|style="background-color:#C0C0C0" | Active Sync ||style="background-color:#C0C0C0" |  and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || rowspan="2" | This defines the level<br>At least one of these needs to be set<br>Typically "Active Sync"|| &nbsp; || activesync
|-
|-
|style="background-color:#C0C0C0" | SyncML ||style="background-color:#C0C0C0" |  [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || syncml
|style="background-color:#C0C0C0" | SyncML ||style="background-color:#C0C0C0" |  and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || syncml (deprecated)
|-
|-
|Global Addressbook  || [[File:Optional.png]] ||  || &nbsp;|| &nbsp; || globaladdressbookdisabled
|Global Addressbook  || &nbsp;|| [[File:Cross_gray.gif]] || &nbsp;|| &nbsp; || globaladdressbookdisabled
|-
|-
|Tasks  || [[File:Optional.png]]  || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|Tasks  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|-
|-
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
|-
|-
| rowspan="6" | '''PIM + InfoStore''' <br>Private use only<br>No sharing, no group functions<br>Enabled for document storage.  
| rowspan="6" | '''PIM + InfoStore''' <br>Private use only<br>No sharing, no group functions<br>Enabled for document storage.  
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp;|| &nbsp; || webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp;|| &nbsp; || webmail
|-
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|-
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|-
|-
|style="background-color:#C0C0C0" | InfoStore ||style="background-color:#C0C0C0" | [[File:Mandatory.png]] ||style="background-color:#C0C0C0" | [[File:check.gif]] || This combined with the absence of other switches defines the level <br> || &nbsp; || infostore
|style="background-color:#C0C0C0" | InfoStore ||style="background-color:#C0C0C0" | [[File:check.gif]] ||style="background-color:#C0C0C0" | [[File:check.gif]] || This combined with the absence of other switches defines the level <br> || &nbsp; || infostore
|-
|-
|Global Addressbook  || [[File:Optional.png]] || || &nbsp;|| &nbsp; || globaladdressbookdisabled
|Global Addressbook  || &nbsp; || [[File:Cross_gray.gif]] || &nbsp;|| &nbsp; || globaladdressbookdisabled
|-
|-
|Tasks  || [[File:Optional.png]]  || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|Tasks  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || tasks
|-
|-
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
|-
|-
| rowspan="9" | '''Groupware Standard'''<br>Full Groupware functionality<br>Access restricted to Web GUI  
| rowspan="9" | '''Groupware Standard'''<br>Full Groupware functionality<br>Access restricted to Web GUI  
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|-
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|-
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|-
|-
|style="background-color:#F0F0F0" | Tasks ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || tasks
|style="background-color:#F0F0F0" | Tasks ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || tasks
|-
|-
|style="background-color:#C0C0C0" | Shared Folders ||style="background-color:#C0C0C0" | [[File:Mandatory.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || rowspan="3" | This defines the level<br>All need to be set together || &nbsp; || readcreatesharedfolders
|style="background-color:#C0C0C0" | Shared Folders ||style="background-color:#C0C0C0" | [[File:check.gif]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || rowspan="3" | This defines the level<br>All need to be set together || &nbsp; || readcreatesharedfolders
|-
|-
|style="background-color:#C0C0C0" | Public Folders ||style="background-color:#C0C0C0" | [[File:Mandatory.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || editpublicfolders
|style="background-color:#C0C0C0" | Public Folders ||style="background-color:#C0C0C0" | [[File:check.gif]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || editpublicfolders
|-
|-
|style="background-color:#C0C0C0" | Task Delegation ||style="background-color:#C0C0C0" |  [[File:Mandatory.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || delegatetask
|style="background-color:#C0C0C0" | Task Delegation ||style="background-color:#C0C0C0" |  [[File:check.gif]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || delegatetask
|-
|-
|Global Addressbook || [[File:Optional.png]] || || &nbsp;|| &nbsp; || globaladdressbookdisabled
|style="background-color:#F0F0F0" | Global Addressbook ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || &nbsp; || &nbsp; || globaladdressbookdisabled
|-
|-
|InfoStore  || [[File:Optional.png]] || [[File:check.gif]] || &nbsp;|| &nbsp; || infostore
|InfoStore  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || infostore
|-
|-
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
| &nbsp;  || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp; || &nbsp;
|-
|-
| rowspan="14" | '''Groupware Premium'''<br>Full Groupware functionality<br>All external clients enabled (Mobility, Outlook, Mac)
| rowspan="16" | '''Groupware Premium'''<br>Full Groupware functionality<br>All external clients enabled (Mobility, Outlook, Mac)
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|style="background-color:#F0F0F0" | Email ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]] || &nbsp; || &nbsp; || webmail
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|-
|-
|style="background-color:#F0F0F0" | Contacts  ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || contacts
|style="background-color:#F0F0F0" | Tasks ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || tasks
|-
|-
|style="background-color:#F0F0F0" | Calendar ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || calendar
|style="background-color:#F0F0F0" | Shared Folders ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || &nbsp; || readcreatesharedfolders
|-
|-
|style="background-color:#F0F0F0" | Tasks ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp;|| &nbsp; || tasks
|style="background-color:#F0F0F0" | Public Folders ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" | [[File:check.gif]]  || &nbsp; || &nbsp; || editpublicfolders
|-
|-
|style="background-color:#F0F0F0" | Shared Folders ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || Technical Requirement || &nbsp; || readcreatesharedfolders
|style="background-color:#F0F0F0" | Task Delegation ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || &nbsp; || &nbsp; || delegatetask
|-
|-
|style="background-color:#F0F0F0" | Public Folders ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || Technical Requirement || &nbsp; || editpublicfolders
|style="background-color:#F0F0F0" | Global Addressbook ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || &nbsp; || &nbsp; || globaladdressbookdisabled
|-
|-
|style="background-color:#F0F0F0" | Task Delegation ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || &nbsp; || &nbsp; || delegatetask
|style="background-color:#F0F0F0" | USM ||style="background-color:#F0F0F0" | [[File:check.gif]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || &nbsp; || &nbsp; || usm
|-
|-
|style="background-color:#F0F0F0" | Global Addressbook ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || Technical Requirement || &nbsp; || globaladdressbookdisabled
|style="background-color:#C0C0C0" | OLOX2 ||style="background-color:#C0C0C0" | and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || rowspan="4" | This defines the level<br>At least one of these needs to be set.<br>Typically OLOX2 and Active Sync || &nbsp; || olox20
|-
|-
|style="background-color:#F0F0F0" | USM ||style="background-color:#F0F0F0" | [[File:Mandatory.png]] ||style="background-color:#F0F0F0" |  [[File:check.gif]]  || Technical Requirement || &nbsp; || usm
|style="background-color:#C0C0C0" | OLOX (Legacy) ||style="background-color:#C0C0C0" | and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || webdavxml (deprecated)
|-
|-
|style="background-color:#C0C0C0" | OLOX2 ||style="background-color:#C0C0C0" |  [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || rowspan="4" | This defines the level<br>At least one of these needs to be set.<br>Typically OLOX2 and Active Sync || &nbsp; || olox20
|style="background-color:#C0C0C0" | Active Sync ||style="background-color:#C0C0C0" |  and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || activesync
|-
|-
|style="background-color:#C0C0C0" | Active Sync ||style="background-color:#C0C0C0" |  [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || activesync
|style="background-color:#C0C0C0" | SyncML ||style="background-color:#C0C0C0" |  and/or ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || syncml (deprecated)
|-
|-
|style="background-color:#C0C0C0" | Mobile App ||style="background-color:#C0C0C0" | [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || tbd
|InfoStore  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || infostore
|-
|-
|style="background-color:#C0C0C0" | SyncML ||style="background-color:#C0C0C0" | [[File:Optional.png]] ||style="background-color:#C0C0C0" |  [[File:check.gif]]  || &nbsp; || syncml
|iCal Access  || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || ical (deprecated)
|-
|-
|InfoStore || [[File:Optional.png]] || [[File:check.gif]] || &nbsp;|| &nbsp; || infostore
|vCard Access || &nbsp; || [[File:check.gif]] || &nbsp;|| &nbsp; || vcard (deprecated)
|-
|-
|}
|}
Line 174: Line 177:
|Multiple Mailaccounts || The user can use  external IMAP/POP3 Mailaccounts within the OX WebGUI. Starting with 6.20 this can be configured per email service || &nbsp; || multiplemailaccounts
|Multiple Mailaccounts || The user can use  external IMAP/POP3 Mailaccounts within the OX WebGUI. Starting with 6.20 this can be configured per email service || &nbsp; || multiplemailaccounts
|-
|-
|Subscriptions || The user can subscribe to external/social datasources, like LinkedIN, XING, Facebook, Gmail, .... Starting with 6.20 this can be configured per subscription service || &nbsp; || subscriptions
|Subscriptions || The user can subscribe to external/social datasources, like LinkedIN (removed since 7.10.0), XING, Facebook, Gmail, .... Starting with 6.20 this can be configured per subscription service || &nbsp; || subscriptions
|-
|-
|Publications || The user can publish his own data (contacts/documents) for other users in the internet || &nbsp; || publication
|Publications || The user can publish his own data (contacts/documents) for other users in the internet || &nbsp; || publication
Line 193: Line 196:
|-
|-
| rowspan="2" | '''Minimum GW Premium'''
| rowspan="2" | '''Minimum GW Premium'''
|vCard || The user is allowed to create and manage resources for the whole company || &nbsp; || vcard
|vCard || The user can download all his contacts via the vCard interface || &nbsp; || vcard (deprecated)
|-
|-
|iCal  || The user can download all his contacts via the iCal interface || &nbsp; || ical
|iCal  || The user can download all his contacts via the iCal interface || &nbsp; || ical (deprecated)
|-
|-
|}
|}

Latest revision as of 08:19, 8 February 2018

This information is valid until 7.4.1 (included)

Note: This represents the state of OX6 and AppSuite until v7.4.1. For the newer implementation, see AppSuite: Permission Level.


OX Permission Level Matrix

OX HE/SE/App Suite allows to provide different permission levels to the users.

The levels start with pure webmail-only functionality and end with the full featured groupware product including all connectors and are described in the first table.

  • Webmail contains pure webmail functionality including a private addressbook
  • PIM (Private Information Management) adds private calendar and private tasks, no group or sharing permissions are available
  • PIM + Mobility adds mobile synchronisation to the PIM level
  • PIM + InfoStore adds private InfoStore functionality to the PIM level
  • Groupware Standard includes all group and sharing permissions as well as the InfoStore
  • Groupware Premium adds all external connectors and mobile synchronisation to Groupware Standard

In addition to this levels, OX HE/SE/App Suite contains several functions, which can flexible be used with every level. This functions are described in the second table.


How to read the Matrix

Definition
Mandatory This column defines the options, which must not be changed for this level. This is a technical requirement and necessary for the correct functioning of OX HE/SE/App Suite
Default This column lists the options, which are activated per default for this level
API Parameter Related parameter in the RMI, SOAP and CLT API - described in the Provisioning Documentation
   
and/or Minimum one of this options need to be activated in this level
  Fields in this color define the most important differentiator to the next lower level

Matrix - Permission Levels

This table describes the mandatory parameters for the different permission levels.

OX Base Levels    Functionality Mandatory (technical requirement) Default Requirements / Description   API Parameter
Webmail

Webmail only

Email Check.gif Check.gif     webmail
Contacts Check.gif Check.gif     contacts
             
PIM
Private use only
No sharing, no group functions. 		Email Check.gif Check.gif The absence of other features defines this level   webmail
Contacts Check.gif Check.gif   contacts
Calendar Check.gif Check.gif   calendar
Global Addressbook   Cross gray.gif     globaladdressbookdisabled
Tasks   Check.gif     tasks
             
PIM + Mobility
Private use only
No sharing, no group functions
Enabled for mobile synchronization 		Email Check.gif Check.gif     webmail
Contacts Check.gif Check.gif     contacts
Calendar Check.gif Check.gif     calendar
USM Check.gif Check.gif     usm
Active Sync and/or Check.gif This defines the level
At least one of these needs to be set
Typically "Active Sync"		   activesync
SyncML and/or Check.gif   syncml (deprecated)
Global Addressbook   Cross gray.gif     globaladdressbookdisabled
Tasks   Check.gif     tasks
           
PIM + InfoStore
Private use only
No sharing, no group functions
Enabled for document storage. 		Email Check.gif Check.gif     webmail
Contacts Check.gif Check.gif     contacts
Calendar Check.gif Check.gif     calendar
InfoStore Check.gif Check.gif This combined with the absence of other switches defines the level
  infostore
Global Addressbook   Cross gray.gif     globaladdressbookdisabled
Tasks   Check.gif     tasks
             
Groupware Standard
Full Groupware functionality
Access restricted to Web GUI 		Email Check.gif Check.gif     webmail
Contacts Check.gif Check.gif     contacts
Calendar Check.gif Check.gif     calendar
Tasks Check.gif Check.gif     tasks
Shared Folders Check.gif Check.gif This defines the level
All need to be set together		   readcreatesharedfolders
Public Folders Check.gif Check.gif   editpublicfolders
Task Delegation Check.gif Check.gif   delegatetask
Global Addressbook Check.gif Check.gif     globaladdressbookdisabled
InfoStore   Check.gif     infostore
             
Groupware Premium
Full Groupware functionality
All external clients enabled (Mobility, Outlook, Mac) 		Email Check.gif Check.gif     webmail
Contacts Check.gif Check.gif     contacts
Calendar Check.gif Check.gif     calendar
Tasks Check.gif Check.gif     tasks
Shared Folders Check.gif Check.gif     readcreatesharedfolders
Public Folders Check.gif Check.gif     editpublicfolders
Task Delegation Check.gif Check.gif     delegatetask
Global Addressbook Check.gif Check.gif     globaladdressbookdisabled
USM Check.gif Check.gif     usm
OLOX2 and/or Check.gif This defines the level
At least one of these needs to be set.
Typically OLOX2 and Active Sync		   olox20
OLOX (Legacy) and/or Check.gif   webdavxml (deprecated)
Active Sync and/or Check.gif   activesync
SyncML and/or Check.gif   syncml (deprecated)
InfoStore   Check.gif     infostore
iCal Access   Check.gif     ical (deprecated)
vCard Access   Check.gif     vcard (deprecated)



Additional Flexible Functions

The following functions can be added flexible to each permission level.

Additional Functions   Default Requirements / Description   API Parameter
Minimum Webmail Collect Emailaddresses Email addresses typed into sent/reveived emails can be saved automatically in a dedicated folder   collectemailaddresses
Edit Password If a plugin to change the own password is installed on the system, it will be displayed in the settings area   editpassword
         
Minimum PIM Multiple Mailaccounts The user can use external IMAP/POP3 Mailaccounts within the OX WebGUI. Starting with 6.20 this can be configured per email service   multiplemailaccounts
Subscriptions The user can subscribe to external/social datasources, like LinkedIN (removed since 7.10.0), XING, Facebook, Gmail, .... Starting with 6.20 this can be configured per subscription service   subscriptions
Publications The user can publish his own data (contacts/documents) for other users in the internet   publication
         
Minimum PIM + InfoStore WebDAV Allows WebDAV access to InfoStore documents; Requires InfoStore   webdav
         
Minimum GW Standard Manage Resources The user is allowed to create and manage resources for the whole company   editresource
Manage Groups The user is allowed to create and manage groups for the whole company   editgroup
         
Minimum GW Premium vCard The user can download all his contacts via the vCard interface   vcard (deprecated)
iCal The user can download all his contacts via the iCal interface   ical (deprecated)
Retrieved from "https://wiki.open-xchange.com/wiki/index.php?title=OX_Permission_Level&oldid=23816"