Restricting Access to OH3 Overview and Pages to Selected Users (other than visibleTo)

You can restrict who sees those tabs with this property:

image

However at the moment there’s no RBAC system wrt. items (I suppose these are most important objects to “segregate” as things and rules are not accessible to non-admins anyways - but there could be a need for those as well). Any such restrictions that you see in the UI are only for display purposes and won’t restrict a tech-savvy user to do the proper API call and achieve what they want.
That being said with visibleTo to you can:

  1. restrict the display to additional roles (role:apartment1) (that you define in the Karaf console)
  2. restrict the display to specific users (user:landlord)

I know RBAC systems have been implemented in forks but they aren’t part of openHAB because they haven’t been suggested for inclusion to the upstream yet.

1 Like