Skip to content

rework roles part for de and eng #975

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Svanvith wants to merge 2 commits into
base: main
Choose a base branch
from
Open

rework roles part for de and eng #975

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9cfe46a
rework roles part for de and eng
Svanvith Jun 19, 2026
44dccac
refine space roles in german
Heiko-Pohl Jun 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 10 additions & 4 deletions docs/user/roles/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,15 +6,21 @@ title: Roles

# Roles

This section explains the role models used in OpenCloud. It covers general user roles, the permissions available within Spaces, and the access levels that can be assigned when sharing files and folders.
OpenCloud uses different role models for different areas of the system. User roles, Space roles, and Share roles are separate from each other and control different permissions.

User roles define what a user can do on a system-wide level. They control administrative permissions, such as managing users, groups, and Spaces.

Space roles define what a member can do inside a specific Space. They control access to Space content and Space management options.

Share roles define what a recipient can do with shared files and folders. They apply to shares and do not change the user's role in OpenCloud or their role inside a Space.

## In this section

- [User roles](./user-roles.md)
Learn about the available user roles in OpenCloud, including Admin, Space Admin, User, and User Light.
Learn about system-wide user roles in OpenCloud, including Admin, Space Admin, User, and User Light.

- [Space roles](./space-roles.md)
Understand the permissions available within a Space, including Can View, Can Edit, and Can Manage.
Understand the permissions available for members inside a Space, including Can View, Can Edit, and Can Manage.

- [Share roles](./share-roles.md)
Review the access levels available when sharing files and folders.
Review the access levels available for shared files and folders.
47 changes: 25 additions & 22 deletions docs/user/roles/share-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,37 +6,40 @@ description: Share roles in OpenCloud
draft: false
---

# Sharing Roles in OpenCloud
# Share Roles in OpenCloud

| Role | view | download | upload | edit | add | delete | only view doc, img, pdf with watermark |
| :---------------- | :--: | :------: | :----: | :--: | :-: | :----: | :------------------------------------: |
| can view (secure) | - | - | - | - | - | - | x |
| can view | x | x | - | - | - | - | - |
| can upload | x | x | x | - | - | - | - |
| can edit | x | x | x | x | x | x | - |
| Role | view | upload | edit | add | delete | only view doc, img, pdf with watermark |
| :---------------- | :--: | :----: | :--: | :-: | :----: | :------------------------------------: |
| can view (secure) | - | - | - | - | - | x |
| can view | x | - | - | - | - | - |
| can edit | x | x | x | x | x | - |

## Space Member Roles and Permissions
## Can View Secure

In a Space, members can have different roles that determine what they can do with shared files and folders.
The `can view (secure)` role allows recipients to view supported files in a restricted viewer.

### Can View (Secure)
Recipients with this role can:

- You can only view documents, pictures, and PDFs.
- A watermark is added to the files.
- Downloading is not allowed.
- View documents, images, and PDF files
- View files with a watermark

### Can View
Recipients with this role cannot upload, edit, add, or delete files and folders.

- You can view and download files and folders.
- No restrictions on downloading.
## Can View

### Can Upload
The `can view` role allows recipients to view shared files and folders.

- You can view, download, and upload files and folders.
Compared with `can view (secure)`, recipients with this role can view shared content without the restricted viewer and watermark.

### Can Edit
Recipients with this role cannot upload, edit, add, or delete files and folders.

- You can edit, add, and delete files and folders.
- Full access to modify shared content.
## Can Edit

Each role gives a different level of access, ensuring the right permissions for each user!
The `can edit` role includes the permissions of `can view` and allows recipients to modify shared content.

Recipients with this role can:

- Upload files
- Create files and folders
- Edit files and folders
- Delete files and folders
39 changes: 24 additions & 15 deletions docs/user/roles/space-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,37 +8,46 @@ draft: false

# Space Roles in OpenCloud

In a Space, members can have different roles. Each role defines what a member can do within that Space.

| Role | view | download | upload | edit | add | delete | manage members | disable / enable Space | edit quota | delete Space |
| :--------- | :--: | :------: | :----: | :--: | :-: | :----: | :------------: | :--------------------: | :--------: | :----------: |
| can view | x | x | - | - | - | - | - | - | - | - |
| can edit | x | x | x | x | x | x | - | - | - | - |
| can manage | x | x | x | x | x | x | x | x | x | x |
| can manage | x | x | x | x | x | x | x | x | x | - |

## Space Roles and Permissions
## Can View

In a Space, members can have different roles that give them different levels of access.
The `can view` role allows members to view and download files in the Space.

### Can View
Members with this role cannot upload, create, edit, or delete files and folders.

This role allows the member to view and download files in the Space, but they cannot make any changes, upload or create new files and folders.
## Can Edit

### Can Edit
The `can edit` role includes the permissions of `can view` and allows members to work with content in the Space.

With this role, the member can do everything a "Can View" member can do, plus:
Members with this role can:

- Upload files to the Space
- Create new files and folders
- Create files and folders
- Edit files and folders
- Delete files and folders, including their history
- Restore deleted files

### Can Manage
## Can Manage

The `can manage` role includes the permissions of `can edit` and allows members to manage the Space.

This role gives the member all the abilities of "Can Edit," plus:
Members with this role can:

- Add or remove members from the Space
- Change the roles of other members in the Space
- Add members to the Space
- Remove members from the Space
- Change the roles of other Space members
- Enable and disable the Space
- Edit the quota of the Space
- Delete the Space
- Edit the Space quota

:::note
Members with the `can manage` role can manage a Space, but they cannot delete it.

Each role determines what a member can do within the Space!
Deleting a Space requires the OpenCloud user role `Admin` or `Space Admin`. For more information, see [User roles in OpenCloud](./user-roles.md).
:::
80 changes: 35 additions & 45 deletions docs/user/roles/user-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,68 +8,58 @@ draft: false

# User Roles in OpenCloud

| Role | Personal Space | create Spaces | can be Space Manager | manage Users and Groups |
| :---------- | :------------: | :-----------: | :------------------: | :---------------------: |
| Admin | x | x | x | x |
| Space Admin | x | x | x | - |
| User | x | - | x | - |
| User Light | - | - | x | - |
| Role | can be Space Manager | Personal Space | create/delete Spaces | manage Users and Groups |
| :---------- | :------------------: | :------------: | :------------------: | :---------------------: |
| User Light | x | - | - | - |
| User | x | x | - | - |
| Space Admin | x | x | x | - |
| Admin | x | x | x | x |

## Admin

The Administrator role in OpenCloud has the same abilities as a Space Admin but in addition it has special permissions to manage users, groups, and system settings.
However, administrators do not have direct access to Space data or the ability to add users to Spaces where they don't have the "can manage" role. Below are the key actions an administrator can perform:

- Create and Delete local Users & Groups

Administrators can add new local users and remove existing local users from the system.
They can also create and delete local groups to organize users efficiently.
## User Light

- Edit Users & Groups
A User Light has limited access and does not have a personal Space by default.

User details such as names, emails, and roles can be modified.
Groups can be updated by adding or removing members as needed.
A User Light can:

- Prevent Login
- Be added as a member to a Space
- Be assigned a role in a Space

If necessary, administrators can disable user accounts, preventing them from logging in.
This is useful for security reasons or when an account is no longer needed.
:::note
If a user previously had the role User or higher and is later changed back to User Light, they keep their existing personal Space.
:::

- Manage Spaces (without Access to Space Data)
## User

Administrators can manage Spaces like enable, disable or delete them and rename it or adjust the quota, even if they don't have the "can manage" role.
However, they cannot access the files inside a Space or add members to it.
A User has the same Space membership options as User Light and also has a personal Space for their own files and folders.

- Change the Logo
A User can:

The system logo can be updated to reflect the company branding.
This can be done in the Admin Settings under the "General" section.
- Create files and folders in their personal Space
- Upload and manage their own data

## Space Admin

A Space Admin has the highest level of control over Spaces. They can:
A Space Admin has the same permissions as a User and can also manage Spaces on an administrative level.

- Create and manage Spaces
- Be assigned the "Can Edit" role in Spaces they didn’t create
- Have a personal Space where they can create files, folders, and upload data
A Space Admin can:

## User
- Create, delete, enable, and disable Spaces
- Rename Spaces
- Adjust Space quotas
- Manage Spaces without accessing their content

A regular User has access to their own Space and can be part of other Spaces. They can:
Space Admins can manage the Space itself, even if they are not members of the Space. This includes administrative actions such as enabling, disabling, deleting, renaming, or changing the quota of a Space.

- Create files and folders in their personal Space
- Upload and manage their own data
- Be added as a member to a Space
- Can have the "Can Edit" role in a Space
Space Admins cannot access the files inside a Space unless they have been added to the Space with the required Space role. They also cannot add or remove Space members unless they have the "Can manage" role in that Space.

## User Light
## Admin

A User Light has limited access and does not have their own personal Space. They can:
An Admin has the highest administrative role in OpenCloud. Admins have Space Admin permissions and can also manage users, groups, and system settings.

- Be added as a member to a Space
- Can have the "Can Edit" role in a Space
- They do not have a personal Space
An Admin can:

:::note
If a user previously had the role User or higher and is later changed back to User Light, they will still keep their personal Space.
:::
- Create and delete local users
- Create and delete local groups
- Edit user details, such as names, email addresses, and roles
- Add users to groups or remove users from groups
- Disable user accounts to prevent login
23 changes: 18 additions & 5 deletions i18n/de/docusaurus-plugin-content-docs/current/user/roles/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,29 @@ title: Rollen

# Rollen

Dieser Abschnitt erklärt die Rollenmodelle in OpenCloud. Er behandelt allgemeine Benutzerrollen, die Berechtigungen
innerhalb von Spaces und die Zugriffsebenen, die beim Teilen von Dateien und Ordnern vergeben werden können.
OpenCloud verwendet unterschiedliche Rollenmodelle für verschiedene Bereiche
des Systems. Nutzerrollen, Space-Rollen und Freigaberollen sind voneinander
getrennt und steuern unterschiedliche Berechtigungen.

Nutzerrollen definieren, was ein Nutzer auf Systemebene tun kann. Sie steuern
administrative Berechtigungen wie das Verwalten von Nutzern, Gruppen und
Spaces.

Space-Rollen definieren, was ein Mitglied in einem bestimmten Space tun kann.
Sie steuern den Zugriff auf Space-Inhalte und die Verwaltungsoptionen des
Spaces.

Freigaberollen definieren, was ein Empfänger mit freigegebenen Dateien und
Ordnern tun kann. Sie gelten für Freigaben und ändern weder die Rolle eines
Nutzers in OpenCloud noch seine Rolle innerhalb eines Spaces.

## In diesem Abschnitt

- [Benutzerrollen](./user-roles.md)
Erfahren Sie mehr über die verfügbaren Benutzerrollen in OpenCloud, darunter Admin, Space Admin, User und User Light.
- [Nutzerrollen](./user-roles.md)
Erfahren Sie mehr über die systemweiten Nutzerrollen in OpenCloud, darunter Admin, Space Admin, User und User Light.

- [Space-Rollen](./space-roles.md)
Verstehen Sie die Berechtigungen innerhalb eines Space, darunter Kann ansehen, Kann bearbeiten und Kann verwalten.
Verstehen Sie die Berechtigungen für Mitglieder innerhalb eines Spaces, darunter Kann ansehen, Kann bearbeiten und Kann verwalten.

- [Freigaberollen](./share-roles.md)
Prüfen Sie die Zugriffsebenen, die beim Teilen von Dateien und Ordnern verfügbar sind.
72 changes: 50 additions & 22 deletions i18n/de/docusaurus-plugin-content-docs/current/user/roles/share-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,37 +6,65 @@ description: Rollen beim Teilen in OpenCloud
draft: false
---

# Rollen beim teilen in OpenCloud
# Rollen beim Teilen in OpenCloud

| Rolle | anzeigen | herunterladen | hochladen | bearbeiten | erstellen | löschen | nur doc, img, pdf mit Wasserzeichen anzeigen |
| :--------------------- | :------: | :-----------: | :-------: | :--------: | :-------: | :-----: | :------------------------------------------: |
| kann anzeigen (geheim) | - | - | - | - | - | - | x |
| kann anzeigen | x | x | - | - | - | - | - |
| kann hochladen | x | x | x | - | - | - | - |
| kann bearbeiten | x | x | x | x | x | x | - |
| Rolle | anzeigen | hochladen | bearbeiten | hinzufügen | löschen | nur doc, img, pdf mit Wasserzeichen anzeigen |
| :------------------------------ | :------: | :-------: | :--------: | :--------: | :-----: | :------------------------------------------: |
| Kann anzeigen (sichere Ansicht) | - | - | - | - | - | x |
| Kann anzeigen | x | - | - | - | - | - |
| Kann hochladen | x | x | - | - | - | - |
| Kann bearbeiten | x | x | x | x | x | - |

## Space-Mitglieder-Rollen und -Rechte
## Kann anzeigen (sichere Ansicht)

In einem Space können Mitglieder verschiedene Rollen haben, die bestimmen, was sie mit gemeinsamen Dateien und Ordnern tun können.
Die Rolle `Kann anzeigen (sichere Ansicht)` erlaubt Empfängern, unterstützte
Dateien in einem eingeschränkten Viewer anzuzeigen.

### Kann ansehen (sicher)
Empfänger mit dieser Rolle können:

- Sie können nur Dokumente, Bilder und PDFs anzeigen.
- Die Dateien werden mit einem Wasserzeichen versehen.
- Das Herunterladen ist nicht erlaubt.
- Dokumente, Bilder und PDF-Dateien anzeigen
- Dateien mit Wasserzeichen anzeigen

### Kann anzeigen
Empfänger mit dieser Rolle können keine Dateien und Ordner hochladen, bearbeiten,
hinzufügen oder löschen.

- Sie können Dateien und Ordner anzeigen und herunterladen.
- Keine Einschränkungen beim Herunterladen.
## Kann anzeigen

### Kann hochladen
Die Rolle `Kann anzeigen` erlaubt Empfängern, gemeinsam genutzte Dateien und
Ordner anzuzeigen.

- Sie können Dateien und Ordner anzeigen, herunterladen und hochladen.
Im Vergleich zu `Kann anzeigen (sichere Ansicht)` können Empfänger mit dieser
Rolle geteilte Inhalte ohne den eingeschränkten Viewer und ohne Wasserzeichen
anzeigen.

### Kann bearbeiten
Empfänger mit dieser Rolle können keine Dateien und Ordner hochladen, bearbeiten,
hinzufügen oder löschen.

- Sie können Dateien und Ordner bearbeiten, hinzufügen und löschen.
- Voller Zugriff auf die Änderung gemeinsamer Inhalte.
## Kann hochladen

Jede Rolle gibt eine andere Zugriffsstufe, so dass jeder Benutzer die richtigen Berechtigungen erhält!
Die Rolle `Kann hochladen` enthält die Berechtigungen von `Kann anzeigen` und
erlaubt Empfängern, Dateien und Ordner hochzuladen.

Empfänger mit dieser Rolle können:

- Dateien und Ordner anzeigen
- Dateien und Ordner herunterladen
- Dateien und Ordner hochladen

Empfänger mit dieser Rolle können keine Dateien und Ordner bearbeiten, hinzufügen
oder löschen.

## Kann bearbeiten

Die Rolle `Kann bearbeiten` enthält die Berechtigungen von `Kann anzeigen` und
erlaubt Empfängern, gemeinsam genutzte Inhalte zu ändern.

Empfänger mit dieser Rolle können:

- Dateien hochladen
- Dateien und Ordner erstellen
- Dateien und Ordner bearbeiten
- Dateien und Ordner löschen

Jede Rolle bietet eine andere Zugriffsstufe, damit jeder Benutzer die richtigen
Berechtigungen erhält.
Loading