# Are Space-based permissions broken?

**URL:** <https://community.fibery.io/t/are-space-based-permissions-broken/5244>\
**Category:** Get Help\
**Created:** [October 5, 2023, 2:09am UTC](https://community.fibery.io/t/are-space-based-permissions-broken/5244 "2023-10-05T02:09:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Matt\_Blais](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/matt_blais/32/1464_2.png) [@Matt\_Blais](https://community.fibery.io/u/Matt_Blais)\
**Post date:** [October 5, 2023, 2:09am UTC](https://community.fibery.io/t/are-space-based-permissions-broken/5244/1 "2023-10-05T02:09:29Z")

</div>

Either I am misunderstanding how the current Space/group based permissions work, or something is broken.

Here you can see that the “Credentials” space grants **Editor** level access to Users in the “MANAGER” group:

> ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/1/146679a4dcd3ec3161eaec51c12318f22f088ae0.png)

Here you can see that “Susan C” is a member of the “MANAGER” group:

> ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/8/83b22386cb762facba30bb594c130fd876c19821.png)

**So why can “Susan C” NOT open a Credentials entity?** She can certainly see all the Credentials fields in this table view:

> ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/b/bfbd7ef99355edf1a8492491e7e977a0a92f1dc2.png)

---

<div class="post-metadata">

**Author:** ![Chr1sG](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/chr1sg/32/3941_2.png) [@Chr1sG](https://community.fibery.io/u/Chr1sG)\
**Post date:** [October 5, 2023, 6:06am UTC](https://community.fibery.io/t/are-space-based-permissions-broken/5244/2 "2023-10-05T06:06:53Z")

</div>

Does the problem persist after a refresh?  
It does look a bit strange, since if it were really true that Susan C had no access to Credentials #1 then I would not expect it to be visible in the grid view.

---

<div class="post-metadata">

**Author:** ![Matt\_Blais](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/matt_blais/32/1464_2.png) [@Matt\_Blais](https://community.fibery.io/u/Matt_Blais)\
**Post date:** [October 5, 2023, 4:24pm UTC](https://community.fibery.io/t/are-space-based-permissions-broken/5244/3 "2023-10-05T16:24:27Z")

</div>

Now Susan has “Read-only” access to the entity (and can open the entity view)…

Better, but still not right (she should have Editor level access).

* * *

**OK, I figured it out - Susan was a Guest User 🙄**
