Skip to content

Need ability to provide configurable permissions when managing Group Memberships #872

Open
@rjainrohit

Description

@rjainrohit

Is your feature request related to a problem? Please describe.

The Box Group Membership object does not have the ability to specify configurable permissions when adding members to the group and when updating existing group membership.

"configurable_permissions": {
"can_run_reports": true
}

Describe the solution you'd like

Add a Permission enum in Box Group Membership and a create and update method to provide the configurable permissions in the BoxGroupMembership.java

Describe alternatives you've considered

REST APIs

Additional context

The default in the admin console in the box web app when adding members to a group as admins gives all permissions to the group members. Its odd that default group admin permissions are not restricted and there is no UI while adding the members as admins to select their group membership permissions. There is a not so obvious gear icon next to each member that allows one to change the configurable permissions after the member has been added in the web UI but since its not so obvious it has resulted in group admins with full privileges in 100s of our box groups partly due to user experience of the web app and partly due to lack of knowledge of our admins of how powerful the default group admins can be in Box. We need to bring security permissions in compliance and since this change needs to happen to 100s of groups, we will have to use now APIs to restrict the group admin members permissions.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementAdded to issues that describes enhancements

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions