How to restrict creating extensions and poersonas?

[avzolo01]

Hi Folks
Is there a way to restrict access to creating personas and extensions?

[fsch-ppi]

Sure thing. I did the most basic approach and made it possible to create only by admins:

Changed the extension-service.ts

Changed the persona-service.ts so only admins can publish personas.

You could do the first example in the second case if you only want admins to be able to create them at all

[agg-anwarulislam]

Hi Florian, i am new to this, can you please advise where you changed this so i can do the same.

[mkandukuri4]

@fsch-ppi have you also implemented access controls on extensions, so it will be visible to specific SG's

[fsch-ppi]

@mkandukuri4 I simply added a "viewers" and "editors" field to Personas, Extensions and Prompts (that hold comma seperated emails since we use microsoft for authentification)

The Find functions then search for all Entries with the userID,
all published entries if the user is admin
and all entries where the user is in the viewers field

When editing it is checked
if the user either is admin, created the entry or is present in the editors field.

This is not sophisticated management but fully sufficient for our usecase!

Also I programmed this in a way, that only admins can actually see and set viewers and editor fields, otherwise they will be blank