thanks
Raffaele
1. We use an internal user/permissions system today but if there's a
requirement then it wouldn't be too difficult to extend this to use
LDAP too.
2. Every entity (and by extension, space) can be assigned permissions
based on CRUD (create, read, update, delete) and different users, by
virtue of their roles, can have different access levels at a per-
entity level. We have deliberately not enabled this in the community
version. You can see where the roles would be created and edited if
you look in the 'directory' space.
Thanks,
Adam