Roles and Permissions¶

1.0 Enterprise Edition

In SeaTable Enterprise Edition (SeaTable EE), user and administor roles determine a user's/an administrator's permissions and quotas. (For org users, some permissions and quotes are also determined by the role assigned to the organization.)

All changes relating to the SeaTable's roles are done in the configuration file dtable_web_settings.py.

NOTE: Admin privileges are not part of the user role.

User Roles¶

A user role is comprised of up to 10 permissions and up to 7 quotas. If a permissions or a quote is not specifically set in a role, the permission is assumed to be given (default value = True) and no quota is applied (default value = no value or empty string).

User Permissions¶

The following permissions are supported in user roles:

The default value for all permissions is True. This means that if a permission is not specifically set, the role grants the permission.

User Quotas¶

The following quotas are supported in user roles:

Standard User Roles¶

SeaTable has two standard, preconfigured user roles defaultand guest. They can be used in the Users' section of the system administration without prior configuration.

The standard user roles are defined as follows:

ENABLED_ROLE_PERMISSIONS = {
    'default': {
        'can_add_dtable': True,
        'can_add_group': True,
        'can_generate_external_link': True,
        'can_create_common_dataset': True,
        'can_run_python_script': True,
        'can_use_advanced_permissions': True,
        'can_use_advanced_customization': True,
        'can_use_external_app': True,
        'can_use_automation_rules': True,
        'can_archive_rows': True,
        'role_asset_quota': '',
        'row_limit': -1,
        'big_data_row_limit': -1,
        'big_data_storage_quota': '',
        'scripts_running_limit': -1,
        'snapshot_days': 180,
        'share_limit': 100
    },
    'guest': {
        'can_add_dtable': False,
        'can_add_group': False,
        'can_generate_external_link': False,
        'can_create_common_dataset': False,
        'can_run_python_script': False,
        'can_use_advanced_permissions': False,
        'can_use_advanced_customization': False,
        'can_use_external_app': False,
        'can_use_automation_rules': False,
        'can_archive_rows': False,
        'role_asset_quota': '',
        'row_limit': -1,
        'snapshot_days': 30,
        'share_limit': 100
    },
}

If you want to modify the permissions and quotes of either or both standard roles, copy-and-paste the above codeblock into dtable_web_settings.py and modify as per your needs. Restart SeaTable for the changes to take effect.

Custom User Roles¶

You can add additional user roles by extending the codeblock in dtable_web_settings.py.

To add a role employee, for example, add the following lines (beginning at 'employee' and ending at }, ) to the existing role definition.

ENABLED_ROLE_PERMISSIONS = {
    'employee': {
        'can_add_dtable': True,
        'can_add_group': False,
        'can_create_common_dataset': False
    },
}

Restart SeaTable for the new role to become available in SeaTable.

Administrator Roles¶

Similar to a user role, an administrator role is comprised of several permissions, but no quotes.

Administrator Permissions¶

The following permissions are supported in administrator roles:

Standard Admininstrator Roles¶

SeaTable has four standard, preconfigured administrator roles default admin, audit admin, daily admin and custom admin. They can be used in the Users' section of the system administration without prior configuration.

Custom Administrator Roles¶

Just like a user role, you can add additional administrator roles by adding/modifying the following codeblock in dtable_web_settings.py.

ENABLED_ADMIN_ROLE_PERMISSIONS = {
    'new_admin_role': {
        'can_view_system_info': True,
        'can_config_system': True,
        'can_manage_user': True,
        'can_manage_group': True,
        'can_view_admin_log': True,
    }
}