Permissions

What you can see and do in Spider depends on the permissions your organization has given you. Two colleagues can open the same page and see different commands on it.

What you are not allowed to do, you don't see

Spider hides what your permissions don't allow, rather than showing it in grey:

• Menu items: a page you may not open is not in the main menu or the settings menu.
• Commands: a command you may not use is not in the ribbon.
• Tabs: a page's tab you may not see, such as Permissions, is not shown.

So a command in grey is one you are allowed to use, but not right now; its tooltip says why (see The ribbon).

There is one exception. Your permissions can differ from one item to the next: you may be allowed to start one process but not another. A command like that shows while any row in the list allows it, and is grey for a selected row that doesn't, with the tooltip Not permitted for this item. That way the ribbon doesn't change shape as you move from row to row.

Viewing without changing: when you may see an item but not change it, you can still open it. Its drawer then opens read-only, with Close as its only button.

If a colleague sends you a link to a page you may not see, the page opens, but shows nothing, or the message Something went wrong, please try again.

How permissions are given

An administrator gives permissions to users and to groups, as permission sets: named bundles of permissions, such as View definitions, Change definitions or Start runs. Each set is one of three kinds:

• View sets let you see things.
• Contribute sets let you add, change and start things.
• Manage sets let you delete things, and decide who may do what.

Each set is Allow, Deny or Not Set for a user or a group. A Deny always wins over an Allow, from wherever it comes: from a group you are in, or from higher up.

Permissions are given at a level, and hold for everything below it:

• For the whole organization, in Settings › Security › Permissions: see Permissions, in the page reference.
• For one kind of item, such as every process definition, on the Permissions tab of its list, such as Processes › Permissions.
• For one item, such as one process definition, on the Permissions tab of its page.

Everyone in an organization is in its All Users group, which is given the Member set. Its Administrators have Manage organization, which allows them everything in it.

When you need a permission

Ask one of your organization's administrators. Tell them which page or command you need, and for which item.

For administrators

An administrator can see why a user may or may not do something. In Settings › Security › Users, open the user, and choose the Effective permissions tab (see User). View as this user, on the user's User tab in the ribbon, then shows the whole app as that user sees it, read-only. A banner at the top says so, with Stop viewing as this user.