Hi,

I have the below security concerns reg  my Dev setup.

1. The K2 Dev environment that we set up now  is OPEN to all users. If you know the K2 Designer URL you can access it. How and what is the best way to limit this access only to users designated as K2 users and prevent them from other AD users?

2. Is there a way we can limit access to K2 resources (or objects) based on roles? For example, a user identified as a Business Analyst will have access to create SmartObjects (not Advanced SmartObjects), Views and Forms but no Workflows. A user identified as a developer will have more access to manipulate SmartObjects and create and alter Workflows etc.

Pls let me know the best possible solution for this.