# Nov 16, 2023 / šŸ”’ Entity permissions (experimental) **URL:** \ **Category:** Changelog\ **Created:** [November 16, 2023, 4:37pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414 "2023-11-16T16:37:19Z")\ **Posts on this page:** 20\ **Page:** 3
**Author:** ![Chr1sG](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/chr1sg/32/3941_2.png) [@Chr1sG](https://community.fibery.io/u/Chr1sG)\ **Post date:** [March 7, 2024, 9:02am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/41 "2024-03-07T09:02:32Z")
> [@aoe](#): > > But mostly that we may have internal business logic relations that we donā€™t want to expose. And if we would add relations in the future (it happens although seldom) we donā€™t want to have to worry whether clients are going to see stuff that they should not. It will detract us from using Fibery freely/to its fullest. > > It just makes the most sense (for us) to only display relations that a user has been explicitly given access to. I canā€™t imagine we are the only business thinking about this šŸ™‚ Thanks. I understand that you need to be sure that data is not exposed, and I get that there is no point showing a relation if there is no content, but I was also trying to understand the possible situations where revealing the mere existence of a relation is concerning. I mean, I canā€™t imagine a client would be upset to learn that there is a relationship to ā€˜Teamā€™ or ā€˜Meetingsā€™, and even knowing that you maintain ā€˜Time logsā€™ seems unlikely to be a great revelation(!) Iā€™m not sure what ā€˜Occupanciesā€™ means, and so I donā€™t know the ways in which this might de worrying for a client to see. Anyway, overall, it helps to assess the wiseness of the decision to make the schema ā€˜openā€™. Would be really interesting to hear examples from other community members as well. > [@aoe](#): > > Yes querying the API is fine, Iā€™m looking for a UI solution which would handle \>95% of cases (guessing here) And yeah, most users wonā€™t query the schema via API anyway šŸ˜‰ ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [March 7, 2024, 1:36pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/42 "2024-03-07T13:36:46Z")
> [@antoniokov](#): > > Automatically providing access to Assignees and other linked users. Weā€™re really waiting on this one! We are restructuring our spaces because we have so much more possibilities since access templates have been released šŸ˜„ Will the ā€˜auto provide access to assigneesā€™ be a standard feature or a setting on space level? ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/d/d12ddf178f5ac449a9179a99e6eba824908ad266.png) And will it also be an option in the access template? Or will that not be needed because of the auto access then? ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [March 7, 2024, 5:03pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/43 "2024-03-07T17:03:43Z")
> [@aoe](#): > > Any news on this one? Itā€™s mostly this part which is holding us back from inviting clients šŸ™‚ We are getting there, still in plans. > [@aoe](#): > > And also this [issue](https://community.fibery.io/t/a-guest-user-can-see-invite-all-existing-users-in-a-workspace/5948) (bug?) The root cause seems to be limiting access to Users: e.g. a client shouldnā€™t know about other clients. This is part of the planned DB-level access. Otherwise, Iā€™m with @Chr1sG on this: > I think it is reasonable to allow users to share things they know with people they know (in the workspace). > > Even if it didnā€™t behave like that, there would be nothing to stop someone with view access from taking screenshots or copy-pasting content, and I donā€™t know many tools that effectively prevent that 100%. * * * > [@YvetteLans](#): > > Will the ā€˜auto provide access to assigneesā€™ be a standard feature or a setting on space level? On the Field level: if you have a relation to User DB somewhere (e.g. Assignees, Owner, DRI), you can turn on automatic access via any access template, either a default or a custom one. At least, thatā€™s the current plan šŸ™‚ ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [March 7, 2024, 5:54pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/44 "2024-03-07T17:54:43Z")
> [@antoniokov](#): > > On the Field level Thatā€™s even better šŸ˜„ Is there a rough ETA? ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [March 8, 2024, 9:32am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/45 "2024-03-08T09:32:06Z")
> [@YvetteLans](#): > > Thatā€™s even better šŸ˜„ Is there a rough ETA? Unless we face unexpected obstacles, automatic access should be out before the nights start to get longer in the Northern Hemisphere šŸ˜… ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [March 8, 2024, 10:29am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/46 "2024-03-08T10:29:16Z")
> [@antoniokov](#): > > Unless we face unexpected obstacles, automatic access should be out before the nights start to get longer in the Northern Hemisphere šŸ˜… So before June 21st šŸ˜šŸ˜œ Thatā€™s awesome šŸ˜„ ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [April 5, 2024, 11:42am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/47 "2024-04-05T11:42:39Z")
@antoniokov we are still struggling with the best set-up. And these decisions have a heavy impact on the workspace that we sell to customers so we want to avoid rework where possible. - Previously we had many spaces (25), since access could only be provided on space level - When access templates came, we went back to fewer spaces (7) with the idea that the access could be managed via the access template. - After that we found out that currently a team member canā€™t create new items (like a task) via the access template, unless they have access to the full space where that database is in. So now we are facing GDPR issues again šŸ˜… Because if we give them full access, they can see every item in that space. It would be really helpful to have a bit more information about the ā€˜automatic access featureā€™ that is coming. - We know that access per database will take a while; so we donā€™t want to postpone our go-live for that. But how does the automatic access work? You said that the current plan was: ā€œyou can turn on automatic access via any access template, either a default or a customer oneā€. But will that also be an option on space level? ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/4/4d9b21e0735077b6aac4668f4955b6c05c4ebede.png) So that you have the option ā€œCan **view** and edit only entities assigned to them and create new onesā€ If so, then we can leave our set-up as it is now. Since a team member canā€™t see other ones stuff and can create new items. If thatā€™s not the plan, then it would be helpful to have a bit more information so we can decide whatā€™s best. Thanks! ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [April 5, 2024, 2:15pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/48 "2024-04-05T14:15:22Z")
Unfortunately, specifying who can create Entities of a certain Database requires Database access, so this is unlikely to happen before Q3 or even Q4 this year. Weā€™ll make it right but it will take some time šŸ§˜ Automatic access will only work on the Entity level. Using Forms is the only current workaround for opening up Entity creation to someone outside of a Space that I can think of, Iā€™m afraid. ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [April 5, 2024, 2:38pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/49 "2024-04-05T14:38:40Z")
> [@antoniokov](#): > > Unfortunately, specifying who can create Entities of a certain Database requires Database access, so this is unlikely to happen before Q3 or even Q4 this year. Weā€™ll make it right but it will take some time šŸ§˜ Yes we understand. Itā€™s awesome that itā€™s coming, but can imagine that itā€™s technically challenging šŸ˜… > [@antoniokov](#): > > Automatic access will only work on the Entity level. Thatā€™s good to know. Does that also mean that an option "Can **view** and edit only entities assigned to them and create new onesā€ for a **whole space** will not happen? So the ā€˜contributorā€™ role that we currently have on space level, but then **view** rights added. ![image](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/2/28112b6eba955a2ae76880ce5fecc8b8c78d59af.png) ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [April 9, 2024, 10:36am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/50 "2024-04-09T10:36:22Z")
> [@YvetteLans](#): > > Does that also mean that an option "Can **view** and edit only entities assigned to them and create new onesā€ for a **whole space** will not happen? > > So the ā€˜contributorā€™ role that we currently have on space level, but then **view** rights added. Not only will this new option not happen, but we will likely deprecate the `Contributor` role once we have both DB access and automatic access for assignees. The current Space access levels are a confusing mix of permissions on three levels: - **Space:** who can share Space and create Views. - **Database:** who can read and edit all the data inside the Space. - **Entity:** who can edit specific Entities they are assigned to. We are looking to untangle this knot to both make it obvious who gets access to what and unlock new use cases by combining DB and Entity access independently. ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [April 9, 2024, 2:55pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/51 "2024-04-09T14:55:28Z")
> [@antoniokov](#): > > Not only will this new option not happen, but we will likely deprecate the `Contributor` role once we have both DB access and automatic access for assignees. > > The current Space access levels are a confusing mix of permissions I agree, great that you guys are looking into this šŸ˜„ Itā€™s still a bit blur what our set-up should be given the fact that automatic access on entity level is coming. We want to achieve that a user should be able to **view and edit items they are assigned to**. Letā€™s say we want this for the **SOP database**. The SOP database is currently part of the operations space which has multiple databases. A basic team member can only have access to the SOP database. Will the user have auto access (when thatā€™s set on entity level) to all SOPā€™s they are assigned to, even when they **donā€™t** have access to the whole space? - If so, I donā€™t need to create multiple spaces - If they need both space access and automatic entity level access, I need to create multiple spaces Thanks again! šŸ˜„ ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [April 15, 2024, 6:48pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/52 "2024-04-15T18:48:09Z")
> [@YvetteLans](#): > > Will the user have auto access (when thatā€™s set on entity level) to all SOPā€™s they are assigned to, even when they **donā€™t** have access to the whole space? Yes, they will. ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [April 15, 2024, 7:45pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/53 "2024-04-15T19:45:55Z")
Awesome, thanks! ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [May 7, 2024, 1:49pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/54 "2024-05-07T13:49:00Z")
@antoniokov will the auto access functionality be included in the Standard $10 version or only in Pro $17 version? ---
**Author:** ![Illusory](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/illusory/32/10403_2.png) [@Illusory](https://community.fibery.io/u/Illusory)\ **Post date:** [May 7, 2024, 3:20pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/55 "2024-05-07T15:20:18Z")
> [@antoniokov](#): > > We are looking to untangle this knot to both make it obvious who gets access to what and unlock new use cases by combining DB and Entity access independently. Very much looking forward to the ability to do this. Would also like to see bulk shared access updates on single entities so that we donā€™t need to update them 1 by 1 when we add a new team member or change processes. Lastly, when a user has 1 or more entities shared, Iā€™d still like them to have access to it in the sidebar. e.g. We have a company wiki but want to hide a collection of docs for devs only and collection of docs for operations only. Iā€™d still like them to have the ability to use the space and created views, just not be able to see entities not shared with them. ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [May 8, 2024, 1:25pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/56 "2024-05-08T13:25:33Z")
> [@YvetteLans](#): > > will the auto access functionality be included in the Standard $10 version or only in Pro $17 version? We havenā€™t decided yet ā€” so far itā€™s 50-50, Iā€™d say. P.S. Weā€™ve forgotten to lock custom access templates for non-Pro workspaces after they left beta, so you can tell we are not thinking about monetization before we are sure the value is there. Consider the last few months a grace period šŸ˜… ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [May 8, 2024, 1:27pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/57 "2024-05-08T13:27:42Z")
> [@Illusory](#): > > Would also like to see bulk shared access updates on single entities so that we donā€™t need to update them 1 by 1 when we add a new team member or change processes. Makes sense. Do you use Groups to manage Space access? > [@Illusory](#): > > Iā€™d still like them to have the ability to use the space and created views, just not be able to see entities not shared with them. Now Space access includes both Views and data. Once we have DB-level access this knot should be untied šŸ¤ž ---
**Author:** ![YvetteLans](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/yvettelans/32/6101_2.png) [@YvetteLans](https://community.fibery.io/u/YvetteLans)\ **Post date:** [May 9, 2024, 7:20am UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/58 "2024-05-09T07:20:36Z")
> [@antoniokov](#): > > We havenā€™t decided yet ā€” so far itā€™s 50-50, Iā€™d say. Although I really think Fibery is worth every penny, I also think that it can give you guys a real big competitive advantage. Just my two cents šŸ™‚ > [@antoniokov](#): > > P.S. Weā€™ve forgotten to lock custom access templates for non-Pro workspaces after they left beta Itā€™s a sign of the universe šŸ˜œ ---
**Author:** ![antoniokov](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/antoniokov/32/201_2.png) [@antoniokov](https://community.fibery.io/u/antoniokov)\ **Post date:** [June 14, 2024, 2:23pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/59 "2024-06-14T14:23:14Z")
> [@YvetteLans](#): > > Our databases are quite large and especially for note + task database we want to set permissions based on assignee and linked users. Currently itā€™s a big PITA that a user can find entities via search and linked entities. > [@HereBeBeasties](#): > > I see automatic entity permissions based on fields on the entity as an absolutely critical use-case. Without it you basically need a space admin to go around assigning permissions to everyone, which clearly isnā€™t at all reasonable for things like doing performance reviews, etc. Here we go: [June 13, 2024 / Automatic access for assignees, return to expanded panel](https://community.fibery.io/t/june-13-2024-automatic-access-for-assignees-return-to-expanded-panel/6298) ![automatic-access-for-assignees](https://us1.discourse-cdn.com/flex020/uploads/fibery/original/2X/b/b8f5a579a97aaaf1fd277474e7ed0685cc935d97.gif) Here is the [user guide](https://the.fibery.io/@public/User_Guide/Guide/Automatically-Share-Entities-with-Assignees-327). Please let me know if you have any questions šŸ™‚ ---
**Author:** ![HereBeBeasties](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/herebebeasties/32/5429_2.png) [@HereBeBeasties](https://community.fibery.io/u/HereBeBeasties)\ **Post date:** [June 17, 2024, 4:32pm UTC](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414/60 "2024-06-17T16:32:59Z")
I have no questions, only expressions of love and gratitude to the Fibery team for making things awesome-r. šŸ˜ Love the assignee entity perms stuff - unlocks a bunch of HR-type use-cases. Thanks. [Previous page](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414.md?page=2) [Next page](https://community.fibery.io/t/nov-16-2023-entity-permissions-experimental/5414.md?page=4)