I am able to install openhab on phone and user is able to select any of the available sitemap from the selection if multiple sitemap files are available.
I tend to create two sitemaps using same things but different list of items pointing to common things file.
E.g. There might be 8 channel relay configured in things file, common.things file. I create 8 items in home.items and 8 items in admin.items. They both point to same things file. The client uses home.sitemap configured using items in home.items. The electrical contractor is supposed to access admin.sitemap configured using admin.items.
I have to rely on electrican to keep his access limited to admin.sitemap. Howerver for smart electrical contractor can simply clear default sitemap and can select home.sitemap without my permission.
It would be great if we could create groups with certain access and add users to those groups to allow the access to sitemaps depending on to the user belongs to which group.
This would also be useful for small hotels to setup a common server and then configure administration to allow the phones to access only the relevant sitemaps instead of exposing the appliances in all the rooms.
MainUI has limited support for this through usernames and roles. There is also ongoing work to implement RBAC (currently MainUI controls visibility but a knowledgeable user can still access all Items even if they are not shown on the UI). Given the state of OH today, You’d need to use MainUI and the “visible to” property on pages and widgets so that user only sees what they should have access to.
However, sitemaps are intended to be simple. It’s unknown whether such access control on a user-by-user basis would be implemented or not given the huge jump in complexity involved. I suspect the RBAC work will need to be completed first though.
If at all this needs funding, I would really like to know the estimate to add this feature. As this will allow me and other people to explore sharing server for installing home automation for small hotels who would really be tight on budget and would like to leverage RBAC to allow client to access only his sitemap controlling the room he rented. There will be need for only one server which would be easy to justify. It would significantly boost the opportunity to use openhab. It’s common for them to give access to wifi. If they can share email address and password and if the sitemap is assigned to perticular user only, it will be great opportunity.
It is not about funding, it is about to find volunteers to implement this.
Please keep in mind that there are no paid developers and there is no possibility to hire some.
You can always put bounties on issues to “attract” volunteers
I’ve already worked on a few bounties. For example, one of them was about an edge-case bug that only affected users deploying openHAB behind a reverse proxy with Authentik/Authelia authentication. Nothing with high chances of getting looked into except you offer money to get it fixed …
Thanks for guidance. Can you hint me approximate range of bounty for someone (let’s say you) who would like to work on adding this feature? Would really be of great help.
