{"id":2522,"date":"2016-02-02T14:27:58","date_gmt":"2016-02-02T11:27:58","guid":{"rendered":"https:\/\/everhour.com\/blog\/?p=2522"},"modified":"2025-03-21T12:30:18","modified_gmt":"2025-03-21T09:30:18","slug":"access-control-everhour-2","status":"publish","type":"post","link":"https:\/\/everhour.com\/blog\/access-control-everhour-2\/","title":{"rendered":"Access Control in Everhour 2"},"content":{"rendered":"

UPD<\/strong>: Agree with Adam W.<\/em> (see comments). If an employee is billing hours on a job, the supervisor SHOULD be able to see the breakdown of where those hours were billed. If the user doesn’t want something visible to the supervisor, they shouldn’t use the Everhour account to log the time<\/span>.<\/p>\n

In the following article, I\u2019d like to discuss another super important feature we\u2019ve been thinking a lot and are implementing right now – Access Control.<\/p>\n

In other words, what time a team member is allowed to see and what is not.<\/strong><\/p>\n

<\/p>\n

Our approach has obvious advantages but also nuances we are a little worried about. So, we decided to discuss it with you instead of just imposing our decision.<\/p>\n

The article is focused on Asana<\/a>, but other integration will work similarly.<\/p>\n

It would be easier to explain the following example.<\/p>\n

\"access<\/a><\/p>\n

Say we have a user, John. He is a business owner of \u201cCompany X\u201d and he decided to integrate his account and the whole team to Everhour.<\/p>\n

Inside Asana he has 2 organizations and is part of their teams, has multiple private projects but (attention!<\/em>) there is a workspace, created by one of his managers, where John is not invited to. Whatever the reason is.<\/p>\n

Now, if John tries to build a report in Everhour and sees ALL time for the company, he won\u2019t be able to do so. He won\u2019t see the projects he is not a part of in Asana.<\/p>\n

On the one hand, it seems to be correct. There should be one centralized location where access is configured. For some reason, John was not added into a workspace and it has been acceptable for him until now.<\/p>\n

On the other hand, John cannot obtain the total time for a reporting period thus cannot issue an invoice.<\/p>\n

If we give him an opportunity to see all time in Everhour, ignoring Asana settings, it will be wrong from a privacy standpoint. Whereas with our approach the situation can be solved pretty simple, by adding all relevant team members, responsible for reporting and invoicing, into all teams\/spaces in Asana. Why not?<\/p>\n

Could you share with us some cases or reasons why this approach will not work for you? Maybe you will have a better idea about solving this problem.<\/p>\n\n\n