box / box/box-java-sdk

Need ability to provide configurable permissions when managing Group Memberships

Open
#872 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
170
Forks
189
Avg merge
20h 26m
Merged PRs (30d)
22

Description

### Is your feature request related to a problem? Please describe.
The Box Group Membership object does not have the ability to specify configurable permissions when adding members to the group and when updating existing group membership.

"configurable_permissions": {
"can_run_reports": true
}

### Describe the solution you'd like
Add a Permission enum in Box Group Membership and a create and update method to provide the configurable permissions in the BoxGroupMembership.java

### Describe alternatives you've considered
REST APIs

### Additional context
The default in the admin console in the box web app when adding members to a group as admins gives all permissions to the group members. Its odd that default group admin permissions are not restricted and there is no UI while adding the members as admins to select their group membership permissions. There is a not so obvious gear icon next to each member that allows one to change the configurable permissions after the member has been added in the web UI but since its not so obvious it has resulted in group admins with full privileges in 100s of our box groups partly due to user experience of the web app and partly due to lack of knowledge of our admins of how powerful the default group admins can be in Box. We need to bring security permissions in compliance and since this change needs to happen to 100s of groups, we will have to use now APIs to restrict the group admin members permissions.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.