You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
The Box Group Membership object does not have the ability to specify configurable permissions when adding members to the group and when updating existing group membership.
Add a Permission enum in Box Group Membership and a create and update method to provide the configurable permissions in the BoxGroupMembership.java
Describe alternatives you've considered
REST APIs
Additional context
The default in the admin console in the box web app when adding members to a group as admins gives all permissions to the group members. Its odd that default group admin permissions are not restricted and there is no UI while adding the members as admins to select their group membership permissions. There is a not so obvious gear icon next to each member that allows one to change the configurable permissions after the member has been added in the web UI but since its not so obvious it has resulted in group admins with full privileges in 100s of our box groups partly due to user experience of the web app and partly due to lack of knowledge of our admins of how powerful the default group admins can be in Box. We need to bring security permissions in compliance and since this change needs to happen to 100s of groups, we will have to use now APIs to restrict the group admin members permissions.
The text was updated successfully, but these errors were encountered:
rjainrohit
changed the title
Need ability to provide configurable permissions when managing Group Memeberships
Need ability to provide configurable permissions when managing Group Memberships
Feb 19, 2021
rjainrohit
pushed a commit
to rjainrohit/box-java-sdk
that referenced
this issue
Feb 23, 2021
Is your feature request related to a problem? Please describe.
The Box Group Membership object does not have the ability to specify configurable permissions when adding members to the group and when updating existing group membership.
"configurable_permissions": {
"can_run_reports": true
}
Describe the solution you'd like
Add a Permission enum in Box Group Membership and a create and update method to provide the configurable permissions in the BoxGroupMembership.java
Describe alternatives you've considered
REST APIs
Additional context
The default in the admin console in the box web app when adding members to a group as admins gives all permissions to the group members. Its odd that default group admin permissions are not restricted and there is no UI while adding the members as admins to select their group membership permissions. There is a not so obvious gear icon next to each member that allows one to change the configurable permissions after the member has been added in the web UI but since its not so obvious it has resulted in group admins with full privileges in 100s of our box groups partly due to user experience of the web app and partly due to lack of knowledge of our admins of how powerful the default group admins can be in Box. We need to bring security permissions in compliance and since this change needs to happen to 100s of groups, we will have to use now APIs to restrict the group admin members permissions.
The text was updated successfully, but these errors were encountered: