- Posts: 34
- Thank you received: 4
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
User groups - Perfect isolation of surveys
- cavo789
- Topic Author
- Offline
- Junior Member
Less
More
4 years 6 months ago #189976
by cavo789
User groups - Perfect isolation of surveys was created by cavo789
Good morning all,
In our company, we use the latest version of LimeSurvey in order to ask training participants to give their feedback xxx days after training sessions are finished.
My task is to export LS data to CSV files so we can upload and make reports in our company BI tool (so I'm more a DB query/ API user). I've, actually, really few knowledge in the administration of LS.
My question: with LS, is it possible to create a few administrators (i.e. people with the right to log in in the admin part) but with restricted access to their own domain.
Let's imagine a company with several domains : HR, Training, Sales, Marketing and so on. Does LS supports ACLs and make easy to define an admin for the marketing domain so that person can manage his / her surveys totally alone but, of course, can't see surveys of others (Marketing can only see marketing, HR can only see HR, ...).
Should we install one instance by domain (I suppose not) ?
Thanks a lot for any tips and guidance.
Christophe
In our company, we use the latest version of LimeSurvey in order to ask training participants to give their feedback xxx days after training sessions are finished.
My task is to export LS data to CSV files so we can upload and make reports in our company BI tool (so I'm more a DB query/ API user). I've, actually, really few knowledge in the administration of LS.
My question: with LS, is it possible to create a few administrators (i.e. people with the right to log in in the admin part) but with restricted access to their own domain.
Let's imagine a company with several domains : HR, Training, Sales, Marketing and so on. Does LS supports ACLs and make easy to define an admin for the marketing domain so that person can manage his / her surveys totally alone but, of course, can't see surveys of others (Marketing can only see marketing, HR can only see HR, ...).
Should we install one instance by domain (I suppose not) ?
Thanks a lot for any tips and guidance.
Christophe
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5033
- Thank you received: 1257
4 years 6 months ago #189979
by jelo
manual.limesurvey.org/Manage_users#Examples
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic User groups - Perfect isolation of surveys
A complete ACL or RBAC feature is not implemented. You might need to check in detail if you can find a permission setting which works for you organization.cavo789 wrote: Does LS supports ACLs and make easy to define an admin for the marketing domain so that person can manage his / her surveys totally alone but, of course, can't see surveys of others.
manual.limesurvey.org/Manage_users#Examples
That is currently the only solution with no strings attached.cavo789 wrote: Should we install one instance by domain (I suppose not) ?
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: cavo789
The topic has been locked.
- holch
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 11639
- Thank you received: 2738
4 years 6 months ago #189999
by holch
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
Replied by holch on topic User groups - Perfect isolation of surveys
I think it is possible, but if I remember it is a little weird. I think it was something like not giving the right to modify surveys or something stupid. People can still modify their own surveys, but not those of others. As for me the use case is not very relevant, I never looked into this further, but I remember that there are a couple of topics here in the forum with examples on how to set the rights of the survey admins to achieve this. The super admin has access to everything though. Keep this in mind.
Have a look in the forum, there should be a couple of threads about the topic with screenshots of the permission settings, if I recall right.
And the final solution is one instance per domain, if the permissions don't allow what you are trying to do. Currently the permission system of LS is relatively basic and can not cover every use case yet.
Have a look in the forum, there should be a couple of threads about the topic with screenshots of the permission settings, if I recall right.
And the final solution is one instance per domain, if the permissions don't allow what you are trying to do. Currently the permission system of LS is relatively basic and can not cover every use case yet.
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
The following user(s) said Thank You: cavo789
The topic has been locked.
- Joffm
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 12903
- Thank you received: 3967
4 years 6 months ago #190003
by Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
Replied by Joffm on topic User groups - Perfect isolation of surveys
To restrict a user to see only his own surveys, it is this setting in red.
The other options (templates, plugins, labels, ...) is up to you.
But as I understood the idea was to restrict the access to a user group.
That 3 persons in group HR have their own account, but may see the surveys of the other members of HR, but not of the other departments.
And here is this statement
So for a group of users I have no idea.
Joffm
The other options (templates, plugins, labels, ...) is up to you.
But as I understood the idea was to restrict the access to a user group.
That 3 persons in group HR have their own account, but may see the surveys of the other members of HR, but not of the other departments.
And here is this statement
So for a group of users I have no idea.
Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
The following user(s) said Thank You: cavo789
The topic has been locked.
- cavo789
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 34
- Thank you received: 4
4 years 6 months ago #190015
by cavo789
Replied by cavo789 on topic User groups - Perfect isolation of surveys
Many, many thanks to all of you; really ! **THANK YOU.**
If I correctly understand ... it'll be very difficult if not impossible.
Yes, the idea was to create several groups (HR group for users A, B and C in group HR, Marketing group for G and H and Sales group for users X, Y and Z for instance) and give permissions to groups. A, B and C can create surveys, manage participants, ... for HR surveys. You're right Joffm; not "user" based permission but "group" based permission.
And, why not in an ideal world, give permission to user A to be in both group HR and Training (which is a specialized team of the HR department). User A can, in the ideal world, be part of many groups and have the sum of all permission of these groups.
If I correctly understand, it'll be very difficult to have only one installation of LimeSurvey and make a perfect isolation of surveys / participants / templates / settings / ... based on groups.
So, two more questions please :
1. Is there any solution, even paid solution, that can help to achieve this objective ?
2. If not, so, do you recommend not to lose time with this approach and simply create one instance of LimeSurvey for each domain ? (one LS for HR, one LS for Marketing, ...). One thing makes me think that this is the right approach, it is that the people in the Training team created dozens of surveys / week also, already with them alone, we have a number of surveys (and therefore physical tables in the database) already very important. But, inconvenient, we need then to manage a lot of installations / databases / ... for, in fact, the same feature which is send surveys.
Thank you for your help.
Christophe
If I correctly understand ... it'll be very difficult if not impossible.
Yes, the idea was to create several groups (HR group for users A, B and C in group HR, Marketing group for G and H and Sales group for users X, Y and Z for instance) and give permissions to groups. A, B and C can create surveys, manage participants, ... for HR surveys. You're right Joffm; not "user" based permission but "group" based permission.
And, why not in an ideal world, give permission to user A to be in both group HR and Training (which is a specialized team of the HR department). User A can, in the ideal world, be part of many groups and have the sum of all permission of these groups.
If I correctly understand, it'll be very difficult to have only one installation of LimeSurvey and make a perfect isolation of surveys / participants / templates / settings / ... based on groups.
So, two more questions please :
1. Is there any solution, even paid solution, that can help to achieve this objective ?
2. If not, so, do you recommend not to lose time with this approach and simply create one instance of LimeSurvey for each domain ? (one LS for HR, one LS for Marketing, ...). One thing makes me think that this is the right approach, it is that the people in the Training team created dozens of surveys / week also, already with them alone, we have a number of surveys (and therefore physical tables in the database) already very important. But, inconvenient, we need then to manage a lot of installations / databases / ... for, in fact, the same feature which is send surveys.
Thank you for your help.
Christophe
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5033
- Thank you received: 1257
4 years 6 months ago - 4 years 6 months ago #190016
by jelo
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic User groups - Perfect isolation of surveys
I recommend to install LimeSurvey version 3 and version 4 (still Release candidate, so not usable for production) instance. Check the permissions for yourself.
manual.limesurvey.org/Manage_user_groups...ions_to_a_user_group
After the evaluation give feedback in form of a feature request.
A real RBAC is mentioned from time to time. But most LimeSurvey installations have only a handful of adminaccounts.
en.wikipedia.org/wiki/Role-based_access_control
manual.limesurvey.org/Manage_user_groups...ions_to_a_user_group
After the evaluation give feedback in form of a feature request.
A real RBAC is mentioned from time to time. But most LimeSurvey installations have only a handful of adminaccounts.
en.wikipedia.org/wiki/Role-based_access_control
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Last edit: 4 years 6 months ago by jelo.
The topic has been locked.