Role-based access control system
A computer-readable media, system, and method for providing role-based access management to channels within a group-based communication system. Role-based access management allows for a plurality of roles to be established and for users to be associated with these roles. Roles may be associated with sets of permissions allowing users assigned to the respective role to perform various actions within the group-based communication system. The group-based communication system may include preset, system roles with predetermined permissions and custom, user-defined roles may be created by administrators within the group-based communication system.
1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by at least one processor, perform a method for role-based access management within a group-based communication system, the method comprising:
receiving a role selection from a user for a role within the group-based communication system;
confirming that the user has authority to assign roles within the group-based communication system;
receiving, from the user, an assignment of an assigned user to the role, wherein the assigned user is distinct from the user;
storing a set of role information for the role within a data store, the set of role information comprising an indication of one or more permissions associated with the role and an indication of the assigned user;
receiving an action request from the assigned user, the action request indicative of an action to be performed within the group-based communication system;
retrieving a permission requirement for the action; and
in response to determining that the one or more permissions associated with the role satisfy the permission requirement for the action, accepting the action request from the assigned user, such that the action is performed within the group-based communication system.
2. The computer-readable media of claim 1 , wherein the one or more permissions associated with the role comprises a channel-specific permission that is active within a specific channel of the group-based communication system.
3. The computer-readable media of claim 1 , wherein the role is a contextual role associated with a defined context of the group-based communication system, such that the role is applied for actions within the defined context.
4. The computer-readable media of claim 3 , wherein the defined context comprises one or more specific channels of the group-based communication system.
5. The computer-readable media of claim 3 , wherein the defined context comprises one or more specific workspaces of the group-based communication system.
6. The computer-readable media of claim 1 , further comprising:
in response to determining that the one or more permissions associated with the role do not satisfy the permission requirement for the action, denying the action request from the assigned user, such that the action is not performed within the group-based communication system.
7. The computer-readable media of claim 1 ,
wherein the user is associated with a role management role for assigning and managing roles within the group-based communication system, and
wherein the role management role is associated with a role management permission granting authority to assign roles within the group-based communication system.
8. The method of claim 1 , wherein the one or more permissions associated with the role comprises a channel-specific permission that is active within a specific channel of the group-based communication system.
9. The method of claim 1 , wherein the role is a contextual role associated with a defined context of the group-based communication system, such that the role is applied for actions within the defined context.
10. The method of claim 9 , wherein the defined context comprises one or more specific channels of the group-based communication system.
11. The method of claim 9 , wherein the defined context comprises one or more specific workspaces of the group-based communication system.
12. A method for role-based access management within a group-based communication system, the method comprising:
receiving a role selection from a user for a role within the group-based communication system;
confirming that the user has authority to assign roles within the group-based communication system;
receiving, from the user, an assignment of an assigned user to the role, wherein the assigned user is distinct from the user;
storing a set of role information for the role within a data store, the set of role information comprising an indication of one or more permissions associated with the role and an indication of the assigned user;
receiving an action request from the assigned user, the action request indicative of an action to be performed within the group-based communication system;
retrieving a permission requirement for the action; and
in response to determining that the one or more permissions associated with the role satisfy the permission requirement for the action, accepting the action request from the assigned user, such that the action is performed within the group-based communication system.
13. The method of claim 12 , further comprising:
in response to determining that the one or more permissions associated with the role do not satisfy the permission requirement for the action, denying the action request from the assigned user, such that the action is not performed within the group-based communication system.
14. The method of claim 12 ,
wherein the user is associated with a role management role for assigning and managing roles within the group-based communication system, and
wherein the role management role is associated with a role management permission granting authority to assign roles within the group-based communication system.
15. A system comprising at least one processor and at least one non-transitory memory storing computer executable instructions that when executed by the at least one processor, perform a method for role-based access management within a group-based communication system, the method comprising:
receiving a role selection from a user for a role within the group-based communication system;
confirming that the user has authority to assign roles within the group-based communication system;
receiving, from the user, an assignment of an assigned user to the role, wherein the assigned user is distinct from the user;
storing a set of role information for the role within a data store, the set of role information comprising an indication of one or more permissions associated with the role and an indication of the assigned user;
receiving an action request from the assigned user, the action request indicative of an action to be performed within the group-based communication system;
retrieving a permission requirement for the action; and
in response to determining that the one or more permissions associated with the role satisfy the permission requirement for the action, accepting the action request from the assigned user, such that the action is performed within the group-based communication system.
16. The system of claim 15 , wherein the one or more permissions associated with the role comprises a channel-specific permission that is active within a specific channel of the group-based communication system.
17. The system of claim 15 , wherein the role is a contextual role associated with a defined context of the group-based communication system, such that the role is applied for actions within the defined context.
18. The system of claim 17 , wherein the defined context comprises one or more specific channels of the group-based communication system.
19. The system of claim 17 , wherein the defined context comprises one or more specific workspaces of the group-based communication system.
20. The system of claim 15 , further comprising:
in response to determining that the one or more permissions associated with the role do not satisfy the permission requirement for the action, denying the action request from the assigned user, such that the action is not performed within the group-based communication system.