BIMcloud Role/Permissions Loophole (2 Examples)

[GabrielGG]

Hello,

I  found 2 problems in the Archicad Role Permissions that allow user without Rights to Edit or Create Attributes to import Attributes in a Teamwork-File while working with DWGs

Example 1)

The Problem is

• One user has the Permissions to Import a DWG within a drawing.
• It has no Permissions to Edit or Create Attributes
• It explodes the drawing containing the DWG ... in this moment Archicad will import the Attributes of the DWG without any warning.

I assume the Problem is

• Archicad takes the action "explode the DWG" as part of the Permissions of the user -> This is Right
• Archicad as a Software-System takes all the neccesary steps to achieve the requested action "explode the DWG" -> this is Right
• The Archicad-System takes all the necessary steps to "explode the DWG" not as "Actions of the user" that fall under the BIMcloud permissions but as "Actions of the Archicad-System". The Problem is that all the Actions that are taken as "Actions of the Archicad-System" are not taking the BIMcloud Permissions in consideration -> THIS IS NOT RIGHT.

Example 2)

Master GDLs create Attributes as they wish. There should be a way in BIMcloud to control these.

Any user having the right to Copy-Paste can copy a Master-GDL and is creating Attributes indirectly. Possible solutions:

• extra Permission in the bimcloud to controll Master GDLs separately of the normal Library Parts.
• possibility to control the Permissions to Master GDLs in the PRefferences? (better solution in BIMcloud)
• making the system ask before a Master GDL wants to create Attributes.

I would love to know if somebody had any of these Problems, specially with example 1 as the example 2 is well known.

And If you know another Permissions Loopholes (Attributes or anything else) I would love to know about them.

Gabriel