Device based user access control

---

It would be great, if the use of devices could be restricted. Restriction on page base is not useful in my case.
Multiple types of access would be amazing. (Full control | Only read | neither)

I would like to have a similar feature.
I want to give certain users access to different pages/groups.
It would be nice if the pages/group option are extended from none/read/write to something like this:

{
  "name": "roomy",
  "permissions": {
    "rules": "none",
    "variables": "read",
    "messages": "none",
    "events": "none",
    "devices": "none",
    "groups": {
          "kitchen":"none",
          "bathroom":"write"
          },
    "pages": {
          "favorites":"read",
          "page2":"none"
          },
    "plugins": "none",
    "updates": "none",
    "database": "none",
    "config": "none",
    "controlDevices": true,
    "restart": false
  }

@jonasdhaen See also https://forum.pimatic.org/topic/1540/implemented-user-access-control/4

@mwittig cool, thanks that works in my case!

I just added 1 new page for my kids. They are only allowed to read some temperatures and control a few devices. However, when pressing on a temperature device, they can see all devices in the list while the graph is disabled. I think it is not desired that a resident can see which devices are connected. Moreover it is dangerous that those users can change/delete the devices.

If I set the option ‘ControlDevices’ to false, the user can not control the devices. That is not the purpose. Is there any solution?

      "name": "resident",
      "permissions": {
        "pages": "read",
        "rules": "none",
        "variables": "none",
        "messages": "none",
        "events": "none",
        "devices": "none",
        "groups": "none",
        "plugins": "none",
        "updates": "none",
        "config": "none",
        "controlDevices": true,
        "restart": false
      }
    }

Erik

So … here my config-examples

{
      "name": "admin",
      "permissions": {
        "pages": "write",
        "rules": "write",
        "variables": "write",
        "messages": "write",
        "events": "write",
        "devices": "write",
        "groups": "write",
        "plugins": "write",
        "updates": "write",
        "database": "write",
        "config": "write",
        "controlDevices": true,
        "restart": true
      }

if you set it like this:

{
      "name": "user",
      "permissions": {
        "pages": "read",
        "rules": "read",
        "variables": "read",
        "messages": "read",
        "events": "read",
        "devices": "read",
        "groups": "read",
        "plugins": "read",
        "updates": "read",
        "database": "read",
        "config": "read",
        "controlDevices": true,
        "restart": false
      }

this has only one page and some devices…
he could open the edit tab… and edit something…but if he wants to save here pimatic pull the permission…

so he only can control and not edit…