Advanced Permissions Design
Overview
This document serves as the design conversation canvas for the Advanced Permissions project. This will allow our Enterprise clients to tweak possible operations for their team in more detail than our current roles and folder permissions allow.
Current Design
Before we start discussing changes, it is important that we understand the current state of our permissions. Generally, we have two separate permission systems- role and folder/item permissions. The former sets an ability for the items (read or write) as well as the actions that can be performed on the team. The latter allows the owner to set what members can do for items under certain folders.
Before we talk about making any changes, it's important to know how our permission systems work right now. Basically, we have two types: roles and folder/item permissions.
Roles decide what team members can do with items (like reading or writing) and the actions they can take. Folder/item permissions let the owner decide what each member can do with items in specific folders.
