Is Space Privacy compatible with Custom Space User Management (CSUM)?

extranet
spaceprivacy

#1

Is Space Privacy compatible with Custom Space User Management (CSUM)?


#2

In principle, the two apps do not restrict each other, but the interfaces provided by the CSUM are not filtered by Space Privacy. Depending how you use both apps, this may or may not be a problem.

In concrete terms, this means that users can be found and assigned in the CSUM tab to a space that the logged in user does not actually know about (see the user directory).

When is that a problem?

  1. When there are external extranet user administrators. They should only know about users who work in the same extranet spaces to which this user (administrator) has access. However, they can see all users via “Add User” in the CSUM app.
  2. When there are space administrators who are not authorized in Space Privacy (when they are neither extranet user administrators nor extranet space administrators) and are not allowed to see all users in the system. But this space administration can see all users via “Add User” in the CSUM app.

Both situations are rather rare - the second probably would not occur in practice. For the standard use case where there are only internal extranet administrators/space administrators, there would be no security concerns.

Note: Groups created by Space Privacy cannot be used by the CSUM app


To continually improve and optimize our website for you, we use cookies. By continuing to use this website, you agree to the use of cookies. OK Details