Hi Florian,
thanks for your quick answer.
What you said about I can do it with only Roles. Global_Read and Global_Write Role are both configured as they are suppose to be but I have to assign the role to the objects else nobody can see it? In the Role I define your allowed to do "X" permissions for example to see the tests objects but to see the actual object I need to assign the role to it.
I will try to clarify my problem:
we have as you already mentioned some tests objects where we want to change the permissions via didactic templates. we dont want to click in every objects and manually remove every permission we want to create a right template for it. The template should look like this:
global_read_role = only visible and read rights
global_write_role = everything beside changing permissions and delete
So basically a template where we set permissions for a specific object type in this case tests and can re use it on multiple objects instead of removing everything manually. Also it should delete all other roles which are assigned to the object. In this way we can kind of reset the object right permission to a default.
The issue I am facing is the following:
I create a template but I can only assign rights which both roles gets. I can define that global_read_role only has "X" rights and global_write_role has "X" roles. They both get always the same permissions regardless of what I change. If I use it only the roles which are defined in the template are assigned to the object so this problem is out of the way. Remaining issue is that I can not assign different permission in a template they always have the same this is what I meant with "overwriting itself".
My goal is the follwing to round it up:
1 Template with 2 Roles with different permission for test objetcs.
Best regards,
Matthias