Access levels

[radiant sluice]

Is there anyhting in the pipeline to introduce access levels or similar?

For example...

I use appsmith purely for running my business,

Being the director, I need access to all areas, however people in different roles dont need access to all of the areas of the app, also, there are areas that I would rather they didnt see.

Currently I need to create different variations of the same app to satisfy this. but that then means that if I need to update an area of the app, I need to update multiple apps.

If there was the ability to have one app which I could then restrict access to certain areas, it would make things a lot easier and more manageable.

Ive mentioned before that I have used Budibase. They give the ability to assign users a level then each page you can set the level required to access/view as shown in the attached pic.

If you need a level to access the page and do not have it, the page will not be displayed in the navigation menu.

[sacred parrot]

Hey There,

We've registered your query, and our team will get back to you soon.

Regards,
Team Appsmith

[sacred parrot]

Hey! RBAC is a feature of Business Edition.

Consider filling out the form from the link -
https://www.appsmith.com/enterprise
For pricing details, please visit - https://www.appsmith.com/pricing
[https://www.appsmith.com/pricing]

Our team will reach out to you asap 😃

[radiant sluice]

@sacred parrot I have no interest in the business edition as I only use appsmith for my own personal apps or for making apps for my business but what is getting more and more annoying is that I left a perfectly good provider in Budibase after being messaged from your founder and asked to gove it a try... now, a lot of the functions which are available out of the box from them are not available with appsmith unless we pay a fee

[sacred parrot]

A workaround here is keeping track of user roles based on their
appsmith.user.email, maybe in a database, and then setting up permissions of
your own. You can use these permissions in conditionals to hide data, widgets,
or pages from particular users.

[radiant sluice]

@sacred parrot I dont think that would really help as the tabs would still be displayed on the navbar and I also cant see any way to achieve this other than having a js file which runs when open the tab.
You end up with an app that has a lot of uneccesary clutter

[sacred parrot]

You can hide pages, and hidden pages don't show up on that bar. It's true that
you would need a function in each of the affected pages. Another approach would
be to hide the pages and require buttons to navigate to them. Then, the
permission logic could be coded into the button. At that point, you could even
hide the buttons for users that weren't authorized to use them. If you don't
want buttons on every page you could have a sort of hub page that housed them,
or put them on the home page of the app.

[radiant sluice]

@sacred parrot Or, I could move back over to budibase where I would be able to achieve this in a much neater fashion

The suggestion requires continuous updating to keep up with new staff etc... Budibase allows me to set a role and forget about it

[radiant sluice]

@sacred parrot is it possible to navigate between apps... have links in one that can take you to a page on another?

[sacred parrot]

I don't see why not. You can use navigateTo and the page URL in question to
accomplish this.

[radiant sluice]

@sacred parrot
Am I able to add a used to bale to my DB and give each user a role

Then within appsmith create some JS to determine what can and cannot be seen?

If so, is there a sample script I can use? I would need to query the DB to see if {{appsmith.user.email}} matches a user, then select the assigned role, which would then be used to determine their access level based on the js function.

Essentially, I would be looking at adjusting the visibility of certain objects depending on their access

Something like

export default {
myfun: () => {
if(userRole == admin ){
storeValue("showhide1", true).then(storeValue("showhide2", false)).then(storeValue("showhide2", false));
}
else if (userRole == general) {
storeValue("showhide1", false).then(storeValue("showhide2", true)).then(storeValue("showhide2", false));
}
}
}

How would I get the userRole from the db via query?