Permissions on the Unicorn LMS control visibility.
When you create anything on the LMS, the default permissions given to the item (whether it is content, a template, a theme, a sliding banner, etc.) will be for the User who created it and the Organisation Group they sit within. This enables the creator and anyone in the same Organisation, subject to their system role permissions, to be able to view the item.
Permissions are set within the Permissions tab. Only Super Administrators can view the Permissions tab and amend the permissions.
The exception to this is for Sliding Banners. This is because you can set permissions on each Sliding Banner. To edit permissions on a Sliding Banner, click on the padlock icon.
Set permission for a User Group
Navigate to the Permissions tab.
Start typing the name of the User Group in the first field in the Group Permissions section (Note: the User Group must already exist in the system. Super Administrators can create and manage User Groups in the Groups area accessed via the Menu). The system will suggest possible matches. Select the correct User Group from the list.
Select Entity View from the dropdown menu in the Operation column.
Select the Allow radio button.
Set the appropriate Level or leave as 1 (see Levels below).
Click on Add.
Allow permission for a User
Start typing the name of the User in the field in the User column. The system will suggest possible matches. Select the correct User from the list.
Select Entity View from the dropdown menu in the Operation column.
Select the Allow radio button.
Set the appropriate Level or leave as 1 (see levels below).
Click on Add.
Deny a permission
When restricting permission to specific User Groups or Users it is recommended that you remove the higher group permission and then specify just those User Groups or Users that are allowed permission.
However, there may be an occasion where you need to allow permission to the majority group but restrict visibility from a small group within.
To fully explain how to do this, we will look at a specific example of applying permissions to Sliding Banners. We want All Users except Line Managers to view a Sliding Banner.
You first set the field in the User Groups column to All Users, select Entity View from the Operation list, select the Allow radio button and click Add. This would give all Users permission to see the Sliding Banner.
Now type and select Line Managers from the User Group field, the Operation this time wouldn't matter, select the Deny radio button and click on Add. This would prevent anyone in the Line Manager User Group from seeing the Sliding Banner.
Remove a permission
If a permission no longer applies, whether allow or deny, you can remove it by clicking on the Remove link to the right of the User Group or User.
Note: Removing all permissions will prevent any user from viewing the relevant item. If this is done in error, please contact the support team.
Levels
A Deny permission will overrule an Allow permission at the same level.
Using the Sliding Banner example we used for denying permission above, a smaller group of Users who are part of the Line Manager group, which has been set to Deny permission, still need to view the banner. Let's call them SME Managers.
If you set a permission for SME Managers to Allow, they will still not be able to see the banner because they are part of the Line Manager group which has been denied permission. This is because the Deny permission overrules the Allow permission.
To enable the SME Managers to still see the banner and overrule the Line Manager permission which has already been set to Deny, you would need to set the Allow permission level to 2. A level 2 permission overrules a level 1 permission.
