Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access control isn't allowing device subsets #282

Open
mv-si opened this issue Jul 1, 2024 · 8 comments
Open

Access control isn't allowing device subsets #282

mv-si opened this issue Jul 1, 2024 · 8 comments

Comments

@mv-si
Copy link

mv-si commented Jul 1, 2024

Hi,

I have an issue I currently can't solve with the possibilities access control gives me :

  • There are several users configured, which should have access rights to different type of device :

    • Tech supports should be able to access : cashier desks, servers, office desks, ...
    • Accountants should be able to access cashier desks, servers
    • Admin should be able to access every device
  • If I assign a strategy to cashier desks so that accountants can access it, I can't make a broader strategy for tech support to include both cashier desks and servers for example

  • Groups can only be assigned to users

  • Devices can only be assigned to one user

I cannot wrap my head around how I could solve this with the current way access control works.
Please enlighten me or let's see how this can be changed to be able to have such configurations.

Thanks

@mv-si
Copy link
Author

mv-si commented Jul 1, 2024

I guess a solution would be to have an address book for each user group, with set permanent passwords, although they are a bit painful to configure because you need to specify the permanent password for each device each time you create an address book.
Are there alternatives to this?

@rustdesk
Copy link
Owner

rustdesk commented Jul 6, 2024

  • Tech supports should be able to access : cashier desks, servers, office desks, ...
  • Accountants should be able to access cashier desks, servers
  • Admin should be able to access every device

You can create cashier group, server group, office group, tech group, accountant group, admin group,

Create cross-group access rules

  • tech group -> cachier / servers / office groups
  • accountant group -> cashier / servers group
  • admin group -> all groups

@mv-si
Copy link
Author

mv-si commented Jul 8, 2024

  • Tech supports should be able to access : cashier desks, servers, office desks, ...
  • Accountants should be able to access cashier desks, servers
  • Admin should be able to access every device

You can create cashier group, server group, office group, tech group, accountant group, admin group,

Create cross-group access rules

* tech group -> cachier / servers / office groups

* accountant group -> cashier / servers group

* admin group -> all groups

I don't understand your answer, as groups are not assignable to device but to users.
We dont need to have an user for cachier, server and office group.
And that'd also require to login on each device with the appropriate account, which we don't want.

Another solution in mind?

@rustdesk
Copy link
Owner

rustdesk commented Jul 8, 2024

And that'd also require to login on each device with the appropriate account, which we don't want.

No need to to login on each device, you can just assign on web console. We do not have the other solution yet.

@mv-si
Copy link
Author

mv-si commented Jul 8, 2024

And that'd also require to login on each device with the appropriate account, which we don't want.

No need to to login on each device, you can just assign on web console. We do not have the other solution yet.

I'd like to know how please.
Editing a device doesn't give me the option to do so :
image

Editing a group doesn't give me the option either :
image

@rustdesk
Copy link
Owner

rustdesk commented Jul 8, 2024

Edit below

image

@rustdesk
Copy link
Owner

rustdesk commented Jul 8, 2024

And we added a new way for bulk assignment. https://github.com/rustdesk/rustdesk-server-pro/releases/tag/1.3.11

346325912-18548235-74d1-41b2-a5a1-3d379eba8965.mp4

@rustdesk rustdesk closed this as completed Jul 9, 2024
@rustdesk rustdesk reopened this Jul 9, 2024
@mv-si
Copy link
Author

mv-si commented Aug 7, 2024

And that'd also require to login on each device with the appropriate account, which we don't want.

No need to to login on each device, you can just assign on web console. We do not have the other solution yet.

Mh, still, your solution requires to create an user for each asset type, which isn't logical, and requires more users than needed (licencing...)

Please make it so groups can be assigned to devices.
Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants