Authorizing only users within an app to view deployed forms

Hi!

I am having trouble with keeping users in application A from seeing forms
deployed in application B.

To be more descriptive, I have a role ("wald-tax-form-runner") that has
written forms to an application ("wald").
I have configured form-builder-permissions.xml as described in the doc about
multitenancy (https://doc.orbeon.com/form-runner/features/multitenancy): 

  <role name = "wald-tax-form-runner"
        app  = "wald"
        form = "*"/>

but still when I check the form-runner's home page (/orbeon/fr/) The list of
all of the public forms includes the forms created under the app "wald"

I know that I can set form permissions within the form builder, but that
will not work for what we plan to use Orbeon Form Runner for.

Does anyone have any suggestions?

Thank you
Christina

--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1563399274693-0.post%40n4.nabble.com.

Hi Christina,

What you setup in `form-builder-permissions.xml` is just to setup
permissions for form authors using Form Builder. For "end users", it is the
form authors that do the setup, in Form Builder, using the Permissions
dialog. There you'll want to say that to access the current form, users need
to have the `wald-tax-form-runner` role. The simplest version of that would
be to say people with the `wald-tax-form-runner` role can do everything. For
more on this, see:

https://doc.orbeon.com/form-runner/access-control/deployed-forms

You'll let me know if this works for you,

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1563472159009-0.post%40n4.nabble.com.

Hi Alessandro!

Thank you, yes that does work. What I am wondering is if there is a way to
confine a user to only seeing the forms deployed in their app, without
having to trust another end user to always set their permissions to only
their app.

Thanks again!
Christina

--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1563883630375-0.post%40n4.nabble.com.

Hi Alessandro!

My coworker found a resolution - he is going to just have the application
permissions passed to every new form somehow.

Thank you!
Christina

--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1563885230961-0.post%40n4.nabble.com.

Hi Christina, excellent then, and thank you for the update.

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1563950589553-0.post%40n4.nabble.com.