We recently had a problem with some access control. Someone inadvertently pushed an access list through an entire regions work area folders. They picked the wrong option in the dialog and destroyed (Overwrote) all of the access models under that root folder. There is ZERO way to recover and restore those work areas access control, causing a major disruption in production while that access was manually restored. This is a major design flaw! There NEEDS to be a way to recover past access models for a work area. The export to excel option is way too slow to be used for every work area. We need a better tool please.
Having a new dedicated interface under the Admin console may help reduce this risk.
( Quick feedback)
The same we have Workflow, Rules Engine, Environments, We could have one for Permissions.
Under that new Permission node. We could have the whole Datasource Permissions in a Matrix (a kind of a pivot table). On that Matrix we could be allow to add custom columns (To capture the Project Number)
We then filter the lines of the matrix to display only the lines we need. From there we save the filter as a Permission Configuration and give it a name. Which allow us to recall that same set of permissions at a later time.
This configuration will create an entry in the same logic, that we have interface for Environment.
If, at a later time, we create a filter giving the same set of lines, the will system will prompt to create a new version of an existing configuration.
If a line exist in multiple configurations, we can ask to display all the config a line is part of which could allow us to revert back any change made ti any point in time change was made.
Of course if all is good configuration could be place in the trash bin for 90 days and permanently delete. As the final Permission results is save under the permission node.