+1 for easier permissions viewing and configuration. I appreciate the depth and control available, but it’s way too much to dig through.
FWIW, I think you could use the Artist-Admin level for your project leads and Artist for the rest of the team. But you still might need to tweak the configs for both.
I don’t see that role in the mostly default server we have, but it sounds like my intent.
I could use the default Manager role but then I have way too many students running around with the potential to make mistakes in other people’s projects.
Suggestions on the key permissions to enable in the Artist role to allow Manager-like power only in the project the Artist-Manager" is attached to?
I hear you on that…this year will be a voyage of discovery a bit for me. The nice thing about the Task Templates I found is that you can pick and choose what specific tasks to add to each template. So you have a fair amount of customization available without getting overly complex. You can also give them names which can be very clear to the uninitiated as well.
Changes made to parent (aka ‘super class’?) templates are not easily pushed to sub-templates or Projects.
Changes to facility-wide schemas are a nightmare… consider getting an email like this:
sorry, we made a mistake: the frame range can no longer be a string (eg. “1001-1205”), it has to be changed to two numeric fields.
Note that this has to be rolled out to all templates, all projects and all views.
I could imagine, in some idyllic world – “Doug’s World™” – a tool to push changes like this in one atomic update (and leave out an old Project, perhaps.) You know, one massive migration, a real nail-biter, no-undo-possible, terrorizing… button click.
To be honest, if I was an engineer at Shotgun, and someone asked for this feature, I’d faint. Then laugh.
Yeah, I can’t imagine trying to do any master-level updates at the facility with dozens of projects in various stages of progress. It would be nice if they had some sort of ‘lockdown’ feature for projects in progress or otherwise needing protection from potentially damaging updates.
Thankfully here in EDU land, many things can be reset over the summer.
I’ll just have to do this the old fashioned way and change a whole bunch of individual permissions.
Can I get a vote of confidence that adding permissions to the Artist role is better than removing permissions from the Manager role? (Which path involves fewer changes? Is either approach flawed?)
Hey all, great discussion here, really appreciate all of your insights! Would love to hear more from anyone else having trouble getting permissions dialed in, especially when first getting Shotgun up and running.
A couple of quick thoughts here:
Relating to both of these questions - we tend to recommend starting with the more permissive role (in this case, Manager) and locking things down from there to create a slightly more restrictive role. This is mainly due to the fact that more locked-down roles like Artist and Vendor have custom conditional rules acting on them under-the-hood, that you as an end user don’t have any ability to adjust. So you may hit a brick wall with starting with one of those roles and trying to open things up.
As far as key permissions to enable, to make a role that has Manager powers but is restricted as to what Projects they can access, you can just turn on the “See Assigned Projects Only” rule for a duplicate of the Manager role. This will make it so they can’t see or access any Projects that aren’t listed explicitly in the “Projects” field for their Person record.
That is what we are going to do to (access to assigned projects only).
But it is a bit of a shame if you want to allow others to at least view what is happening with the other projects, just not change anything. It would be great to have a ‘View Only’ type of option.
Thanks also for the insights with permissions and how best to approach tweaking them, very good to know!
For anyone who wants a more streamlined way to edit permissions, there is a nicer view for anyone who has access to editing fields. It’s not quite an easy spreadsheet view, but from any page where you can see a column for the field you want to edit you can go to “Configure Field” and then you can use the “Permissions” tab to change what different permissions groups can both see and edit that field.
Hey @reml - this should be the same pref (“See Assigned Projects Only”), just ticking it off for the Artist group. Then they could see any Project on your site.
Hey @tommy.kiser, does that mean they’ll be able to see other projects but not be able to change anything in them? That’s sort of what I was inquiring about. (and I think that’s also a bit of the last part of @reml 's initial request)
Hey @Chad - generally Artists can’t change a lot in general, so I think this would get you most of the way there. They could create or reply to a Note, not sure if that is a concern. They could upload Versions, but that doesn’t feel terribly destructive either.
If you wanted Artists to have access to other Projects, but have permissions different in those Projects than what they have in Projects they are assigned to, that is not something we currently support OOTB.