topic Re: Restrict editing to authorized users while leaving the map viewable to the public in ArcGIS Online Questions

Restrict editing to authorized users while leaving the map viewable to the public

BrettGreenfield__DNR_ — Thu, 21 Nov 2013 12:43:54 GMT

I've created a service that will be made available to the public which expects to see fairly regular updates. Unfortunately, now that I've created the dataset it's leaving my hands, and the group that plans on making the updates doesn't have anyone with ArcMap on their computer, thus any updates would have to go through an ArcGIS Online map. I know I can configure a service to allow editing, but my concern is that ANYONE (with the know-how) could also edit the service and make unwanted changes. I also know I can allow access only to a private group, but then the public can't view the service.

Is there a way to limit the editing capabilities to certain people, while keeping the service viewable to the public? I was thinking there might be a way to create a separate version of the service with editing capabilities, open it to a private group, and synch the public version of the service to the private version, but I'm not sure if that's possible.

Re: Restrict editing to authorized users while leaving the map viewable to the public

MikeMinami — Thu, 21 Nov 2013 16:55:39 GMT

Updated November 7, 2017

The way to do this is to create a hosted feature layer view. Learn more about hosted feature layer views here...Create hosted feature layer views—ArcGIS Online Help | ArcGIS

-------------------------

Original post

There are several options:

You can disable editing on the layer inside the web map. This will remove the Edit menu. However, a savvy user could enable it in the web map and still edit it.

You can embed the map in a web page or create a web mapping application. The user won't be able to enable editing here, but if the features are still public, they can be edited.

Disable editing on the feature layer itself. This will prevent editing at all. When you want to update the data, unshare it and enable editing. This means while updating, the map will not be available.

Administrators have the ability to open a feature layer with full editing capabilities. This could be a way to update the features while still keeping the layer publicly available. However, your editors would then need to have the role of administrator.

Published a tiled layer from the feature layer. The tiled layer would need to be updated whenever the features are updated. This can get costly and time consuming to recreate tiles.

Hope this helps,

Mike

Re: Restrict editing to authorized users while leaving the map viewable to the public

ElizabethMiller — Fri, 22 Nov 2013 16:29:30 GMT

Thank you for the thread -- I am having the same issue. In my case, I have created a small group of 2 or 3 editors who will be making edits to the feature layer in the field using Connector for ArcGIS on tablet devices, adding photos as attachments.

It would be great to be able to have a public version of my ArcGIS Online map where the data is viewable but not editable, with different popup configurations.

But apparently the feature layer can't be accessed by one small group with editing privileges while being publically viewable but locked down.

If anyone has found a way around this problem, I would also like to know about it.

Re: Restrict editing to authorized users while leaving the map viewable to the public

ElizabethMiller — Tue, 17 Dec 2013 15:50:16 GMT

Does anyone have any new insights on this problem?

Any comments from ESRI staff?

Thanks!

Re: Restrict editing to authorized users while leaving the map viewable to the public

TracyGarrison — Sat, 22 Feb 2014 09:33:08 GMT

ArcGIS Online for Organizations for us has been of very limited use. Almost every application I try to make public utilizes public hosted services that I want users within my organization to edit not the public. This seems just plain obvious! Until ArcGIS Online can allow only users within a group to edit a public "hosted service" this is just a BETA application!

Re: Restrict editing to authorized users while leaving the map viewable to the public

MirBBenesov — Mon, 24 Feb 2014 05:49:09 GMT

Do you mean this?
http://ideas.arcgis.com/ideaView?id=087E000000053ew&returnUrl=%2Fapex%2FideaList%3Fc%3D09a300000004xET%26category%3DArcGIS%2BOnline%26p%3D14

Re: Restrict editing to authorized users while leaving the map viewable to the public

LeoDonahue — Tue, 25 Feb 2014 18:42:29 GMT

What about creating different groups, add users to groups and only share the content with users of those groups?

You could have an editor group and create editable maps targeted for users that belong to that group and share the map with that specific group.

You could have a viewer group and create non-editable maps targeted for users that belong to that group and share the map with that specific group.

..etc.

You would have to make several maps with editing enabled on some and disabled on others.

I can't help with with the other issues of savvy users enabling web editing in a map, but I though that would be limited to the person who owns the content?

Re: Restrict editing to authorized users while leaving the map viewable to the public

DevinBartley — Mon, 14 Apr 2014 19:47:08 GMT

I have the same issue. I created a map for the public, but I want a group of staff only to update the map on a regular basis.
The previous option of "unsharing", editing the feature, then sharing again is a bit cumbersome for a non-GIS user. It would be nice to have a simpler workflow in place to facilitate an editing process within an organization.

Patricia

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Tue, 15 Apr 2014 13:39:19 GMT

So, let me see if I get this. If I enable sharing for everyone on a web map with a layer that has editing enabled...then anyone in the world can edit it?

Re: Restrict editing to authorized users while leaving the map viewable to the public

DevinBartley — Tue, 15 Apr 2014 13:48:27 GMT

That is my understanding, and not what was I was expecting.

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Wed, 16 Apr 2014 15:19:09 GMT

There is a way to do this. Whoever is going to be editing a hosted feature layer, make them the owner of that layer. Disable editing on the web map and hosted feature layer. Then you can share the web map publicly and no one else can edit it. Except an Admin of course. I just did it and it works.

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Wed, 16 Apr 2014 15:20:11 GMT

Oh and I forgot to mention that the person doing the editing can be a User and not an Admin. Just make the User the owner of the hosted feature layer.

Re: Restrict editing to authorized users while leaving the map viewable to the public

larrycamp — Wed, 16 Apr 2014 15:55:11 GMT

... make the User the owner of the hosted feature layer.

How do you do this?

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Wed, 16 Apr 2014 16:03:58 GMT

I have a map showing areas for recycle pickups. I did it this way. I invited the person I wanted to do the editing and set them up as a User. Then, I uploaded a zip file and created a hosted feature layer. I edited the details for the hosted feature layer and disabled editing and saved it. Then, created a web map and added the hosted feature layer and shared the map publicly. I then went in again to edit the details for the hosted feature layer and changed the owner to the person I invited(my editor). Done. Now, when the editor wants to edit, they login to AGOL, click My Content, they click the arrow to the right of its name and choose to open it in a map with full editing. When they are finished editing, they click the arrow to the right of the layer and choose to Save Layer. They close out the web map without saving it.

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Thu, 17 Apr 2014 12:21:51 GMT

Anyone try my solution? Of course, you can only have one owner but it does work.

Re: Restrict editing to authorized users while leaving the map viewable to the public

DevinBartley — Wed, 30 Apr 2014 20:59:24 GMT

Shawn,

I have tried your solution and it works. But the problem for me is that the since the layer has changed owner, I (The administrator) cannot view that layer anymore. Is there a way for an administrator to view all layers even if she is not the owner of those layers? Seems like there is no way to go back once the owner has changed.

Patricia

Re: Restrict editing to authorized users while leaving the map viewable to the public

MirBBenesov — Fri, 02 May 2014 03:32:13 GMT

Much easier it would be if there was a possibility that the layer was searchable, editable and can be attached to the map projects only to the user organization. I think it would solve many problems for us all.

Re: Restrict editing to authorized users while leaving the map viewable to the public

ShawnKraft — Thu, 08 May 2014 17:48:44 GMT

Ladybug, go to My Org and click on the Users name and then choose Manage Items. Then you should be able to see the layer.

Re: Restrict editing to authorized users while leaving the map viewable to the public

MarkNeumann — Wed, 14 May 2014 17:25:55 GMT

I am adding to this thread because I also would like to see ESRI address this issue.

I have a crew of public works field workers. (around 30) They share about 6 online accounts. (organization) They all need to have full editing rights to a map that tracks action items.

This map needs to be accessible by the public. (everyone) We want the public to be able to create an action item but not edit any of the existing items on the map.

For example, when John Q Public walks down the street and trips on a hole in the sidewalk we want John to be able to open the map and enter the item. (hole in sidewalk here, FIX IT)
Public Works lead (Org user #1) looks at the map on Monday and sees the item created by John Q and directs staff to repair by scheduling the work.
Public Works crew (Org user #2) views map, sees the priority and then repairs John's item. Noting the date when the repair was complete.

Here's the jig. We do not want John Q to look at the map and see that Robert Q Public has placed another item that rivals his repair. John wants his done first so he deletes Roberts. We don't want that. We want the public to be able to add items but not edit. We need many staff users to be able to edit due to their involvement at different stages of the work.

Please, we need editing rights that can be changed at the sharing level. (Everyone/Organization)

Re: Restrict editing to authorized users while leaving the map viewable to the public

deleted-user-zGZcJ5TpRUeA — Tue, 05 Aug 2014 20:47:15 GMT

You can't solve this problem through groups or user security settings. I have been able to find the REST endpoints on any feature service that belongs to a public map, regardless of whether or not the editing has been disabled in the map. Once in the REST services you can apply edits using the REST API.

***DISABLING EDITING IN PUBLIC MAPS DOES NOT MAKE YOUR FEATURE SERVICE SAFE!!***