Currently have 3 intel user types:

• INTEL_ANALYST - access to everything
• INTEL_READY_ONLY - read everything edit nothing
• INTEL_DATA_ENTRY - create/edit records; view entities & records (no query permissions)

Is this request to allow INTEL_DATA_ENTRY users to create a new entity?
Once they save the entity are they prevented from editing it (other than linking it to the record)?

Also how does ticket #2219 fit in to this request? That ticket seems to request data entry users cannot view records. But then what's the point of the data entry user? If we remove that permission they won't be able to do much.

I suggest the following:
INTEL_ANALYST - access to everything
INTEL_READY_ONLY - read everything edit nothing
INTEL_DATA_ENTRY_CREATE_RECORDS - create records only; The can't see the list of records, so essentially, once they close the record they created, there is no way to re-open it.
INTEL_DATA_ENTRY_EDIT_RECORDS - allows view & edit of records;
INTEL_DATA_ENTRY_CREATE_ENTITIES - can create entities only; The can't see search or see existing entities, so essentially, once they close the entity they created, there is no way to re-open it.
INTEL_DATA_ENTRY_EDIT_ENTITIES - allows view & edit of entities;

You should be able to restrict you data entry people however you like with a combination of the last 4 I think.

Image not found...
Intelligence has the following user levels:

• INTEL_ANALYST - access to everything
• INTEL_READ_ONLY - read only access to everything
• INTEL_ENTITY_VIEW - view only access to entities; cannot view or modify any other elements
• INTEL_ENTITY_CREATE - create entities only; cannot view or modify entities or other elements
• INTEL_ENTITY_EDIT - edit entities only; cannot view or modify entities or other elements. This does not make sense on it's own - should always be combined with intel_entity_view
• INTEL_RECORD_VIEW - view only access to records
• INTEL_RECORD_CREATE - create only access to records; cannot view or edit other records
• INTEL_RECORD_EDIT - edit only access to records. Again, this does not make sense on it's own - it should always be combined with intel_record_view. Users can not modify the Record Status - with this permission.
• INTEL_QUERY_ALL - full access to queries (view, edit, modify)

Note: Record Status can only be modified by INTEL_ANALYST users

This particular request can be achieved with INTEL_ENTITY_VIEW & INTEL_ENTITY_CREATE permissions

The following issues were found in 6.0.a4
======================================
INTEL_READ_ONLY
- Shown is the Queries (saved Queries & Query Filters) and Working Set
in the Data Analysis Mode

INTEL_ENTITY_CREATE
- can create records, not entities
- Data Analysis Mode available but no options in it.

INTEL_ENTITY_EDIT
- only shows Data Analysis Mode
- "Search error: You do not have permission to view entities."

INTEL_RECORD_VIEW
- recommendation to set the Records tab as default ranter than the layers tab

INTEL_RECORD_EDIT
- You do not have permission to view records

INTEL_QUERY_ALL
- Nothing shown but SMART Map View. No Intel options at all

INTEL_READ_ONLY - FIXED

INTEL_ENTITY_CREATE -
- can create records, not entities <---- CANNOT REPRODUCE (I can only create entities)
- Data Analysis Mode available but no options in it. <---- By design, users should have some view permission as well

INTEL_RECORD_VIEW
- this applies to the Intel_query_all as well but I cannot figure out how to do this

INTEL_ENTITY_EDIT
By design, users should have some view permission as well

INTEL_RECORD_EDIT
By design, users should have some view permission as well


INTEL_QUERY_ALL - fixed

rev. 6227

In 6.0.a6, there are issues with the Record Edit and Intel Edit accounts.

INTEL_RECORD_EDIT

• Can see both the Assessment and Analysis windows but neither of them will show the Records

Image not found...

INTEL_ENTITY_EDIT

• Can only see the Analysis Mode

Image not found...

this is by design - editing cannot view records/entities - you need to give your user view permission if you want them to view. Perhaps this is dumb....thoughts?

I'm not sure what good it is to grant edit permissions without automatically granting viewing permissions. Without viewing permissions Editing cannot be made.

rev. 6251 (updated to allow edit users to view as well for entities and records)

I think that is a revision number, not a ticket number in the previous comment.

The permissions have been altered in 6.0.a7 to allow INTEL_ENTITY_EDIT and INTEL_RECORD_EDIT to view and edit the Entities and Records.
One difference between the two account settings is that the INTEL_RECORD_EDIT can view the Assessment and Analysis components while the INTEL_ENTITY_EDIT account can only view the Analysis component.
Is there a reason for this difference?

The assessment perspective was designed for reviewing records - open and unprocessed record, process it and close it. If you only have entity access you will not be performing this task so I didn't this user access to the assessment perspective .

All components fixed and accounted for in 6.0.a7