mirror of
				https://github.com/paperless-ngx/paperless-ngx.git
				synced 2025-11-03 19:17:13 -05:00 
			
		
		
		
	Documentation: add workflow permissions note (#10038)
This commit is contained in:
		
							parent
							
								
									4c6fdbb21f
								
							
						
					
					
						commit
						bdbf1b57ce
					
				@ -339,7 +339,7 @@ determine if a user can create, edit, delete or view _any_ documents, but indivi
 | 
			
		||||
still have "object-level" permissions.
 | 
			
		||||
 | 
			
		||||
| Type          | Details                                                                                                                                                                                                                         |
 | 
			
		||||
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | 
			
		||||
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | 
			
		||||
| AppConfig     | _Change_ or higher permissions grants access to the "Application Configuration" area.                                                                                                                                           |
 | 
			
		||||
| Correspondent | Add, edit, delete or view Correspondents.                                                                                                                                                                                       |
 | 
			
		||||
| CustomField   | Add, edit, delete or view Custom Fields.                                                                                                                                                                                        |
 | 
			
		||||
@ -356,7 +356,7 @@ still have "object-level" permissions.
 | 
			
		||||
| Tag           | Add, edit, delete or view Tags.                                                                                                                                                                                                 |
 | 
			
		||||
| UISettings    | Add, edit, delete or view the UI settings that are used by the web app.<br/>:warning: **Users that will access the web UI must be granted at least _View_ permissions.**                                                        |
 | 
			
		||||
| User          | Add, edit, delete or view Users.                                                                                                                                                                                                |
 | 
			
		||||
| Workflow      | Add, edit, delete or view Workflows.<br/>Note that Workflows are global, in other words all users who can access workflows have access to the same set of them.          |
 | 
			
		||||
| Workflow      | Add, edit, delete or view Workflows.<br/>Note that Workflows are global; all users who can access workflows see the same set. Workflows have other permission implications — see [Workflow permissions](#workflow-permissions). |
 | 
			
		||||
 | 
			
		||||
#### Detailed Explanation of Object Permissions {#object-permissions}
 | 
			
		||||
 | 
			
		||||
@ -533,7 +533,7 @@ The following placeholders are only available for "added" or "updated" triggers
 | 
			
		||||
All users who have application permissions for editing workflows can see the same set
 | 
			
		||||
of workflows. In other words, workflows themselves intentionally do not have an owner or permissions.
 | 
			
		||||
 | 
			
		||||
Given their potentially far-reaching capabilities, you may want to restrict access to workflows.
 | 
			
		||||
Given their potentially far-reaching capabilities, including changing the permissions of existing documents, you may want to restrict access to workflows.
 | 
			
		||||
 | 
			
		||||
Upon migration, existing installs will grant access to workflows to users who can add
 | 
			
		||||
documents (and superusers who can always access all parts of the app).
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user