Results 1 to 6 of 6

Thread: Company vs Company privileges.

  1. #1
    Member
    Join Date
    Aug 2006
    Location
    Zoetermeer, The Netherlands
    Posts
    35

    Company vs Company privileges.

    Does anybody have a bit more info about the view and admin ldap configuration amongst company's
    Or a link to existing documentation because im a bit in the dark here, and it would save me time if somebody did this before.

    Company01 with users user1, user2

    Company02 with users user4, user6

    I want user2 to have admin privs over company02, and user1 view privileges over Company02

    What would the settings be in an ldiff file?

    zarafaViewPrivilege:
    zarafaAdminPrivilege:
    zarafaSystemAdmin:
    zarafaQuotaUserWarningRecipients:
    zarafaQuotaCompanyWarningRecipients:
    zarafa-company:



    Thanks in advance.




    Martijn

  2. #2
    Senior Member
    Join Date
    Nov 2007
    Posts
    298

    Re: Company vs Company privileges.

    Hi,

    For admin rights, the company to which the admin belongs must have view rights over the other company.
    As for view rights, those are granted for an entire company, so they cannot be limited to a particular user.

    In any case, for your goal to give user1 and user2 view rights over Company02, and to have user2 admin rights over Company02,
    the following fields must be set on Company02:

    zarafaAdminPrivilege := user2
    zarafaViewPrivilege := Company01

    Ivo

  3. #3
    Member
    Join Date
    Aug 2006
    Location
    Zoetermeer, The Netherlands
    Posts
    35

    Re: Company vs Company privileges.

    So to have user2 adminprivs in company01, company01 always has to have viewprivs?

    My point is that usernames can be the same, tho not in the same company (ou).


    So if i only want user6 (reseller account) from my_company to admin another_company where there also is an identity user6 and i don't want my_company to have full viewprivs where and how can i specify that with the current attributes?

    My head hurts now, i need coffee.....



    Thanks in advance,


    Martijn

  4. #4
    Senior Member
    Join Date
    Nov 2007
    Posts
    298

    Re: Company vs Company privileges.

    Well if companies are allowed to have the same username, then the loginname would be something like [email protected] or \\companyname\username or some other format as configured in loginname_format (server.cfg). So in your case you would have:

    [email protected]_company
    [email protected]_company

    Another alternative would be setting ldap_loginname_attribute to the mail attribute, after which all users can be identified with their email address, in that case the loginname_format attribute can remain at its default value.

    But for an user to be administrator over another company he requires "view" rights first, and that is granted on company level only. Note that with this "view" rights, it is possible for [email protected]_company to be admin over another_company while another_company cannot view my_company.

    In my earlier post I have given the example configuration for the view and admin privileges:


  5. #5
    Member
    Join Date
    Aug 2006
    Location
    Zoetermeer, The Netherlands
    Posts
    35

    Re: Company vs Company privileges.

    We already have the same usernames in different company's, and yes the loginnames are '[email protected]'.
    We have choosen not to use the mail attribute as login because somebody can have multiple email adresses on one mailbox and people get
    confused quickly

    Got the view and admin rights working like a charm now.
    So thanks for your response, and hope i get to meet you this weekend



    Regards,


    Martijn

  6. #6
    Senior Member
    Join Date
    Nov 2007
    Posts
    298

    Re: Company vs Company privileges.

    Good point. Good to hear it is working now.

    Unfortunately I won't be able to attend the summercamp of this weekend.

Similar Threads

  1. [Solved] ist there a way to rename a company?
    By mclu in forum Installation and Configuration Archives
    Replies: 4
    Last Post: 05-08-2010, 08:23 PM
  2. company has no store
    By kfrech in forum Installation and Configuration Archives
    Replies: 1
    Last Post: 06-02-2010, 12:50 PM
  3. Single company -> Multi company.
    By dkjaergaard in forum Installation and Configuration Archives
    Replies: 11
    Last Post: 08-10-2009, 02:34 PM
  4. Multi Company
    By flandercan in forum Installation and Configuration Archives
    Replies: 1
    Last Post: 23-07-2009, 08:58 AM
  5. Contacts - Company field
    By tigron in forum Z-Merge Development Archives
    Replies: 5
    Last Post: 16-04-2009, 12:20 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •