Forum Discussion

angela's avatar
angela
Catalyst II
11 months ago

Do I have to give external users "get" permission for an ItemType when using a MAC policy to restrict access?

Hi community, let´s assume we have a lot of regular Parts in Innovator. An external user now shall have access to a limited amount of these Parts. An additional property specifies which parts he is...
MAC
rushpaint's avatar
rushpaint
Ideator I
10 months ago

No, that behavior isn’t possible by default. The user still needs base permission (like “Released Part”) to access items, and the MAC policy only filters within that permission. Without the base permission, MAC rules won’t apply. So yes, your concern is valid—MAC can't override missing base permissions.


color rush