Creating Ethical Walls

Creating Ethical Walls

At times you may want to create an ethical wall to prevent a specific user from seeing a specific entity.

Permissions in MinuteBox are extremely powerful and dynamic, allowing for incredibly granular permission structures. There are many ways to accomplish the same end. This article provides one example on how to create an ethical wall to prevent a specific user from seeing a specific entity.

If you are not yet familiar with permissions, generally, please be sure to read our article titled How do I set permissions for users for an introduction.

Note: Permissions in MinuteBox are cumulative. This means that if a user is given permissions across multiple User filter groups for the same entity, that user will have maximum permissions granted. 

E.g. If Jane has permissions to View an entity in one permission set and permissions to Update and Edit the same entity in another permission set, Jane will have permission to View, Update and Edit that entity.

Accordingly, to prevent a user from accessing one or more entities pursuant to an ethical wall, you accomplish this through negative, rather than positive action. I.e. you accomplish this by ensuring to not grant the user access permissions rather than taking specific positive action to restrict the user.

1. Give general permissions to some or all users

  1. Create a User filter that includes all users except the user you wish to restrict.
  2. Grant those users View access to some or all entities in your account, including the ones you wish to protect with an ethical wall.

2. Give restricted access to users subject to an ethical wall

  1. Create a User filter that includes only the users subject to an ethical wall.
  2. Create an entity filter with all the entities you want to give those users access to (i.e. ensure that entities subject to an ethical wall are not included in that entity filter).
  3. Give that User filter group permission to the restricted group of entities.