Hey everyone,

We have been using EPDM for 2+ years now. We want to take a deep dive into our configuration and make changes now that our engineers are used to how things work. Part of my role in leading the discussion is to present some industry norms on different parts of the EPDM configs.

One point of discussion will be permissions. When we setup the vault we considered a couple schemes and choose a functional group scheme.

For example, lets say we produce cars we broke the groups down like this:

• Chassis Design Engineers
• Chassis Manufacturing Engineers
• Chassis Process Engineers
• Body Design Engineers
• Body Manufacturing Engineers
• Body Process Engineers
• Tooling

Then in the vault folder structure we have sub-categories:

• Chassis
  • Mustang - CDE
    • Manufacturing - CME
    • Tooling - Tooling
  • Corvett- CDE 
    • Manufacturing - CME
    • Tooling - Tooling
  • Ram - CDE 
    • Manufacturing - CME
    • Tooling - Tooling
• Body
  • Veyron - BDE
    • Manufacturing - BME
    • Tooling - Tooling
  • Beetle - BDE 
    • Manufacturing - BME
    • Tooling - Tooling
  • RX8 - BDE 
    • Manufacturing - BME
    • Tooling - Tooling

Of course this is just quick example we actually make medical devices.

With this permission structure it is pretty easy to keep track of things, but you can also get people accidently messing things up in other people projects. When a Manufacturing engineer needs write access to a project folder instead of just the Manufacturing folder for that project, it can get a little messy.

Could you give me some examples of how you have your groups and permissions divided up.