how to set up different permissions for the same features

[CharlesCao]

We have set up an orgnization, two groups (fox example: read, read/write), and I assigned two users into two groups (fox example: user1 as a member of the read group, user2 as read/write).

I have a feature service with editing,  I hope I could share this feature to these two groups but different permissions, for example, user1 just can review this feature, but user2 can edit it. How could I do?

Thanks

[MikeMinami]

The only way to do this currently is if you simultaneously published a hosted map service and hosted feature service at the same time (from ArcMap). You would use the hosted map service for the non-editing case.

We are looking into adding the ability to disable editing of feature service layers inside a web map. Thus, you would then create one web map for people who need to edit the layer and another for those that don't. This feature may be available by the end of the year.

Thanks,

Mike

[CharlesCao]

The only way to do this currently is if you simultaneously published a hosted map service and hosted feature service at the same time (from ArcMap). You would use the hosted map service for the non-editing case.

We are looking into adding the ability to disable editing of feature service layers inside a web map. Thus, you would then create one web map for people who need to edit the layer and another for those that don't. This feature may be available by the end of the year.

Thanks,

Mike

Thanks Mike.

For solution 1, if I publish a map service anf feature service at the same time, there maybe some different after editing, these two services are not synchronous. The editor can get the newest data of editing, but the reader won't.

It sounds good for the solution 2, but the function seems in the web map instead of the feature service itself. I need to publish and control  the feature services in our local web map app.

[MikeMinami]

Another option is to publish a hosted web application that doesn't expose any editing functions. People who are only supposed to view the data will view it through the published web application. This way, you can display the same feature service in both your use cases and the current data will be shown. Here's the workflow.

Author your web map with the appropriate editable layers.
Click the Share button to publish a hosted web application. Alternatively, you could write your own application. Most the the template web applications don't expose any editing functions.

Now, for those users who need editing, they would open the web map. For viewers, they would interact with the web application.


Like I mentioned, there is ongoing work to evolve feature and map services to better support the workflow you are after. It's not all there just yet, however.

Thanks,

Mike

[HuiWei1]

Just wanted to follow up with this thread.
Our org had similar request within ArcGIS Online.

A shapefile uploaded into Online as feature service. We wanted users from organization can edit (only attribute) but public can view this feature service through a customized web application.

When creating a web map based on this feature service and its configuration, I disabled the editing from the feature service (Details/ Contents). Then I shared it to everyone to create a web application with ArcGIS Online template. However, if I applied the Basic Viewer template for the new web application. my feature layer still can be edited with even Create new feature function showing up. That was very bad since we just wanted public to access the information not change it which we would lose our authority for the data. (I am not sure if it a bug or not)

Question here: what is the approach?

Thanks

[MikeMinami]

Hui,

You should not be able to edit features if editing is disabled on the feature service. I was not able to reproduce this problem. Here's what I did:

Created a hosted feature service with editing disabled.
Added the service to a web map and saved and shared it.
Used the basic viewer tempate to create a web application.

For me, the web application did not show the editing tools. Now, if you have other layers in the web map that are also editable, you will see the editor for those layers. You can also remove the editor tools by configuring the web application from the item details page.

If you can share the URL to your web app here, we can take a look. This would mean you'd have to share the service item, web map, and web app publicly in order for me to see it.

Thanks,

Mike

[MikeMinami]

OK, I can reproduce this issue for an admin in the organization under these specific circumstances. Maybe you'll see some similarity with what you are doing.

An admin of the org creates a feature service that is initially editable. They add it to a web map and create an app based on the basic viewer. They open the basic viewer, and they can edit. In another browser tab/window, they then disable editing on the feature service. However, in the currently running app in the other tab/window, the admin can still edit. So this can happen only when the admin (can be any org admin) is simultaneously running the web app when the editing state of the feature service is changed. If the web app is subsequently closed and opened again, the editor tools will not be there.

This issue is related to a change we made in December to address the edit vs view use case. We now allow an admin to edit a hosted feature service where editing is disabled. This allows (somewhat) for the use case where you want some people to edit the data but others just to view it.

Mike

[MikeMinami]

As of the last update in December, there are some new features that better support the use case where some people need to edit and others just need to view the data. Like before, this is an ongoing effort and over time, we'll provide additional tools.

You can now create a hosted tiled map service from a hosted feature service directly from ArcGIS.com... Previously, you could only publish both services from ArcMap. What this allows you to do is generate tiles based on the current state of the feature service. This is not a complete solution yet, as you need to delete the map service and recreate it whenever you need to update the map service due to changes in the feature service. However, if you have features that don't change often, this may be a viable workflow. In the future, we may be able to track areas of change and only build tiles for those areas.

If you are an administrator of the organization, you can open hosted feature services with full editing control in the ArcGIS.com map viewer. You can do this regardless of the editing level set set on the service. Thus, those people responsible for editing the data can do so (but must be admins) while everyone else will have the current edit settings or no editing, if disabled.  To enable full control, open the hosted feature service item details page, click the Open button and click Open with full editing control. The full control option is only available in the ArcGIS.com map viewer. If your service already allows full editing, you won't see this option in the Open menu.

Thanks,

Mike