<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic BIMcloud Role/Permissions Loophole (2 Examples) in Teamwork &amp; BIMcloud</title>
    <link>https://community.graphisoft.com/t5/Teamwork-BIMcloud/BIMcloud-Role-Permissions-Loophole-2-Examples/m-p/677328#M7272</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I&amp;nbsp; found 2 problems in the Archicad Role Permissions that allow user without Rights to Edit or Create Attributes to import Attributes in a Teamwork-File while working with DWGs&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Example 1)&lt;/P&gt;&lt;P&gt;The Problem is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;One user has the Permissions to Import a DWG within a drawing.&lt;/LI&gt;&lt;LI&gt;It has no Permissions to Edit or Create Attributes&lt;/LI&gt;&lt;LI&gt;It explodes the drawing containing the DWG ... in this moment Archicad will import the Attributes of the DWG without any warning.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;I assume the Problem is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Archicad takes the action "explode the DWG" as part of the Permissions of the user -&amp;gt; This is Right&lt;/LI&gt;&lt;LI&gt;Archicad as a Software-System takes all the neccesary steps to achieve the requested action "explode the DWG" -&amp;gt; this is Right&lt;/LI&gt;&lt;LI&gt;The Archicad-System takes all the necessary steps to "explode the DWG" not as "Actions of the user" that fall under the BIMcloud permissions but as "Actions of the Archicad-System". The Problem is that all the Actions that are taken as "Actions of the Archicad-System" are not taking the BIMcloud Permissions in consideration -&amp;gt; THIS IS NOT RIGHT.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Example 2)&lt;/P&gt;&lt;P&gt;Master GDLs create Attributes as they wish. There should be a way in BIMcloud to control these.&lt;/P&gt;&lt;P&gt;Any user having the right to Copy-Paste can copy a Master-GDL and is creating Attributes indirectly. Possible solutions:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;extra Permission in the bimcloud to controll Master GDLs separately of the normal Library Parts.&lt;/LI&gt;&lt;LI&gt;possibility to control the Permissions to Master GDLs in the PRefferences? (better solution in BIMcloud)&lt;/LI&gt;&lt;LI&gt;making the system ask before a Master GDL wants to create Attributes.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;I would love to know if somebody had any of these Problems, specially with example 1 as the example 2 is well known.&lt;/P&gt;&lt;P&gt;And If you know another Permissions Loopholes (Attributes or anything else) I would love to know about them.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gabriel&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Sat, 20 Sep 2025 12:49:23 GMT</pubDate>
    <dc:creator>GabrielGG</dc:creator>
    <dc:date>2025-09-20T12:49:23Z</dc:date>
    <item>
      <title>BIMcloud Role/Permissions Loophole (2 Examples)</title>
      <link>https://community.graphisoft.com/t5/Teamwork-BIMcloud/BIMcloud-Role-Permissions-Loophole-2-Examples/m-p/677328#M7272</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I&amp;nbsp; found 2 problems in the Archicad Role Permissions that allow user without Rights to Edit or Create Attributes to import Attributes in a Teamwork-File while working with DWGs&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Example 1)&lt;/P&gt;&lt;P&gt;The Problem is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;One user has the Permissions to Import a DWG within a drawing.&lt;/LI&gt;&lt;LI&gt;It has no Permissions to Edit or Create Attributes&lt;/LI&gt;&lt;LI&gt;It explodes the drawing containing the DWG ... in this moment Archicad will import the Attributes of the DWG without any warning.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;I assume the Problem is&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Archicad takes the action "explode the DWG" as part of the Permissions of the user -&amp;gt; This is Right&lt;/LI&gt;&lt;LI&gt;Archicad as a Software-System takes all the neccesary steps to achieve the requested action "explode the DWG" -&amp;gt; this is Right&lt;/LI&gt;&lt;LI&gt;The Archicad-System takes all the necessary steps to "explode the DWG" not as "Actions of the user" that fall under the BIMcloud permissions but as "Actions of the Archicad-System". The Problem is that all the Actions that are taken as "Actions of the Archicad-System" are not taking the BIMcloud Permissions in consideration -&amp;gt; THIS IS NOT RIGHT.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Example 2)&lt;/P&gt;&lt;P&gt;Master GDLs create Attributes as they wish. There should be a way in BIMcloud to control these.&lt;/P&gt;&lt;P&gt;Any user having the right to Copy-Paste can copy a Master-GDL and is creating Attributes indirectly. Possible solutions:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;extra Permission in the bimcloud to controll Master GDLs separately of the normal Library Parts.&lt;/LI&gt;&lt;LI&gt;possibility to control the Permissions to Master GDLs in the PRefferences? (better solution in BIMcloud)&lt;/LI&gt;&lt;LI&gt;making the system ask before a Master GDL wants to create Attributes.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;I would love to know if somebody had any of these Problems, specially with example 1 as the example 2 is well known.&lt;/P&gt;&lt;P&gt;And If you know another Permissions Loopholes (Attributes or anything else) I would love to know about them.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gabriel&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 20 Sep 2025 12:49:23 GMT</pubDate>
      <guid>https://community.graphisoft.com/t5/Teamwork-BIMcloud/BIMcloud-Role-Permissions-Loophole-2-Examples/m-p/677328#M7272</guid>
      <dc:creator>GabrielGG</dc:creator>
      <dc:date>2025-09-20T12:49:23Z</dc:date>
    </item>
  </channel>
</rss>

