feature-requests icon indicating copy to clipboard operation
feature-requests copied to clipboard

Role based private group/room access

Open shortstack opened this issue 4 years ago • 8 comments

Is your feature request related to a problem? Please describe. Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

Describe the solution you'd like We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

If I change the scope of that role (that the user is already part of) to rooms vs global, the user does not get put into the rooms assigned to that role.

Ideally, adding them to a role that is tied to rooms/private groups puts that user into those rooms/private groups.

Describe alternatives you've considered Manually adding users to rooms via the API, which is not ideal.

shortstack avatar Jun 29 '20 14:06 shortstack

Came here to request this. Essentially when i go into the role permissions I want to be able to assign channels that the role will automatically join. The work around as stated above is to individually add each user to a room or make an invite link more publicly available which could result in unwanted users joining the channel.

tazire avatar Aug 11 '20 16:08 tazire

This would add so much functionality. Channels need more thorough ACLs than they have now. IMO this and more seamless voice/video experience would make rocket.chat a real contender.

brendan-mccoy avatar Feb 24 '21 22:02 brendan-mccoy

please add this feature! thanks for such great project

rediahila avatar Mar 08 '21 09:03 rediahila

This would be an awesome feature!

OdinWynd avatar Apr 04 '21 04:04 OdinWynd

Is there anything new on this topic? We also need a way that allows association members to have automatic access to some channels without giving interested parties access to interna.

We had the idea, if it is possible to program a bot, which automatically adds the members to the channels based on their roles.

Has anyone tried this before?

Momaus avatar Sep 04 '23 13:09 Momaus

You can achieve a similar behavior with teams feature: https://docs.rocket.chat/use-rocket.chat/user-guides/rooms/teams Of course, importing roles from SSO would be better, but you can create teams to achieve that behavior in the meantime.

diegolmello avatar Sep 04 '23 13:09 diegolmello

Thanks for the quick answer. Might be a stupid question, but how exactly does a team solve this issue? If you have a private team, you always have to add the members manually, right? And with read-only teams, the non-members can still read everything.

Momaus avatar Sep 04 '23 15:09 Momaus

We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

It's not the ideal workflow, but you can manually assign users to their teams and that would add them to their rooms.

diegolmello avatar Sep 04 '23 16:09 diegolmello