Authorizing only users within an app to view deployed forms

[christinab]

Hi!

I am having trouble with keeping users in application A from seeing forms
deployed in application B.

To be more descriptive, I have a role ("wald-tax-form-runner") that has
written forms to an application ("wald").
I have configured form-builder-permissions.xml as described in the doc about
multitenancy (https://doc.orbeon.com/form-runner/features/multitenancy):

<role name = "wald-tax-form-runner"
app = "wald"
form = "*"/>

but still when I check the form-runner's home page (/orbeon/fr/) The list of
all of the public forms includes the forms created under the app "wald"

I know that I can set form permissions within the form builder, but that
will not work for what we plan to use Orbeon Form Runner for.

Does anyone have any suggestions?

Thank you
Christina

--
Sent from: http://discuss.orbeon.com/

[Alessandro Vernet]

Hi Christina,

What you setup in `form-builder-permissions.xml` is just to setup
permissions for form authors using Form Builder. For "end users", it is the
form authors that do the setup, in Form Builder, using the Permissions
dialog. There you'll want to say that to access the current form, users need
to have the `wald-tax-form-runner` role. The simplest version of that would
be to say people with the `wald-tax-form-runner` role can do everything. For
more on this, see:

https://doc.orbeon.com/form-runner/access-control/deployed-forms

You'll let me know if this works for you,

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet

[christinab]

Hi Alessandro!

Thank you, yes that does work. What I am wondering is if there is a way to
confine a user to only seeing the forms deployed in their app, without
having to trust another end user to always set their permissions to only
their app.

Thanks again!
Christina

[christinab]

Hi Alessandro!

My coworker found a resolution - he is going to just have the application
permissions passed to every new form somehow.

Thank you!

[Alessandro Vernet]

Hi Christina, excellent then, and thank you for the update.

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet