# Permission system is now online

**URL:** <https://community.info-beamer.com/t/permission-system-is-now-online/450>\
**Category:** Announcements\
**Created:** [April 9, 2019, 1:34pm UTC](https://community.info-beamer.com/t/permission-system-is-now-online/450 "2019-04-09T13:34:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![infobeamer-fw](https://community.info-beamer.com/user_avatar/community.info-beamer.com/infobeamer-fw/32/3_2.png) [@infobeamer-fw](https://community.info-beamer.com/u/infobeamer-fw)\
**Post date:** [April 9, 2019, 1:34pm UTC](https://community.info-beamer.com/t/permission-system-is-now-online/450/1 "2019-04-09T13:34:57Z")

</div>

The new [permission system](https://info-beamer.com/doc/permissions) is now online and usable by all users. Right now it’s hidden behind a feature toggle on your [account page](https://info-beamer.com/account). Once enabled you can now:

- Share access to your account with other users, only granting the permissions based on what their role should be.
- Access shared accounts with a click of a button if other users invite you.
- Use some [pre-configured permission rules](https://info-beamer.com/permissions/acl) or [build your own](https://info-beamer.com/doc/permissions#policies).
- Create more than one API key, each with its own permissions.

And a ton more. Feedback or questions on how to use all this are very welcome. Feel free to toy around with the system: You can never lock yourself out of your own account.

---

<div class="post-metadata">

**Author:** ![johnniewalker.email](https://community.info-beamer.com/letter_avatar_proxy/v3/letter/j/a8b319/32.png) [@johnniewalker.email](https://community.info-beamer.com/u/johnniewalker.email)\
**Post date:** [April 9, 2019, 2:21pm UTC](https://community.info-beamer.com/t/permission-system-is-now-online/450/3 "2019-04-09T14:21:27Z")

</div>

Great work as always Florian 🙂

---

<div class="post-metadata">

**Author:** ![infobeamer-fw](https://community.info-beamer.com/user_avatar/community.info-beamer.com/infobeamer-fw/32/3_2.png) [@infobeamer-fw](https://community.info-beamer.com/u/infobeamer-fw)\
**Post date:** [April 9, 2019, 4:08pm UTC](https://community.info-beamer.com/t/permission-system-is-now-online/450/4 "2019-04-09T16:08:52Z")

</div>

Another tiny example of what new possibilities this opens up: I’ve just [updated](https://github.com/info-beamer/package-flap-display/commit/d8443e807f2cd8668ad0431b112d04adba204e42) the [flap display package](https://info-beamer.com/pkg/8474), so it can now react to [pushed device messages](https://info-beamer.com/doc/api#devicecommand). I’ve installed that package on one of my devices and created a policy that only allows the mentioned push API for that exact device. The policy looks like this:

```auto
{
  "Statements": [
    {
      "Action": "device:node-message",
      "Condition": {
        "NumericEquals": {
          "device:id": 7828
        },
        "StringEquals": {
          "message:path": "root/append"
        }
      },
      "Effect": "allow"
    }
  ],
  "Version": 1
}

```

I’ve created and ACL with only this policy, created a new self-access to my account and grabbed its API key. You can now send me messages on the display I’ll keep running a bit using:

```nohighlight
curl -u:b0368fe7b8c0df307bcbd454564674ae \
  https://info-beamer.com/api/v1/device/7828/node/root/append \
  -d 'data=Hello there!'

```

Result on the screen:

![image](https://community.info-beamer.com/uploads/default/original/1X/8470ad544e96eff5ed02012134ea1a0bf097082e.png)

**Feel free to send me your own text in the next few hours!**
