Forums for the Business Analyst

 
  Modern Analyst Forums  Business and Sy...  Agile Analysis ...  Permission-Based Roles in User Stories
Previous Previous
 
Next Next
New Post 6/19/2016 9:16 PM
Unresolved
User is offline Mister Octopus
1 posts
No Ranking


Permission-Based Roles in User Stories 

Hi there. Forgive me for a potentially newbish question (I'm just starting out in the world of analysis):

With user stories, I know that it's good practice to give your "As a user..." section a specific role or persona to help explain the context of the user story. I'm currently writing user stories for a system where we have a handful of different roles who all have different viewing/editing permissions throughout the system. Most of these permissions cross over between the roles, so I'm wondering how to approach the user stories. Obviously, I don't want something that looks like:

"As an administrator, team manager or operator, I want to be able to..."

What is the best way to approach this? Do I just repeat the same story for each role? Do I use a generic "As a user with the correct permissions, I want..."?

Currently I have these stories simplified to "As a user, I want..." and then I have a final story that says:

"As the system, I must only allow users to perform actions as defined by their role permissions."

Is this an acceptable way to go about this, or am I approaching this whole concept wrong?

Thanks in advance!

 
New Post 6/20/2016 3:54 PM
User is offline NitWitNick
244 posts
6th Level Poster


Re: Permission-Based Roles in User Stories 
A User Story Alone Is Really Not Enough ...


A User Story quickly states what the user wants to do with the system at a high level ... So, "As a user...", is a very short description of a feature needed by a user.

And

A User story Does NOT replace Detailed requirements. A user story is basically used as pointer to those detailed requirements ... and it is hard to define both functional and non-functional details by just a user story.


Don't Get Hung Up On Thinking You Will Just Write User Stories ... You Need Detailed Stuff To Develop From ...

 

As I stated Before ... I do consulting and have Never seen a 100% Waterfall or a 100% Agile environment ... most are a Hybrid of various stuff.

 
New Post 3/2/2017 5:17 AM
User is offline sutnarcha
7 posts
10th Level Poster


Re: Permission-Based Roles in User Stories 

Agreeing with NitWitNick by-and-large, I want to add the below...

I always write user stories like "As a user with permission to xxxx...", and who has permission or what role has permission to xxxx... is a different reference document.

 
New Post 4/17/2017 8:26 AM
User is offline Patrick Schmöllerl
3 posts
No Ranking


Re: Permission-Based Roles in User Stories 

As you have already guessed, it is not always wise to describe everything in a user-story-like fashion. Every method has its use and purpose.

In a way it depends on the set-up of your project and your responsibilities, but what I like to do when describing the more detailed impact of permissions and roles is these 3 steps:

- Describe the user-story in a way: "As an administrator, I want ... " so the idea of who should be allowed to do what is commonly understood.
- Add a more detailed description for development in the form of: "IF the user does NOT have the permission xyz, THEN ..."
- Add a very seperate and standardized work-item for the user-administration or whoever does that in your organisation: "Add permission X to role Y. Add permission X to role Z. And in case the set-up allows it: Add role Y to user Patrick", etc.

 

 
New Post 5/11/2017 12:38 AM
User is offline Kimbo
422 posts
5th Level Poster


Re: Permission-Based Roles in User Stories 

Dear Occy

Another suggestion: write your user story 'As a user I want etc'. Then in your acceptance criteria write a series of scenarios for each role. I use gherkin from the BDD camp to specify scenarios for acceptance criteria. Works well

Kimbo

 

 
Previous Previous
 
Next Next
  Modern Analyst Forums  Business and Sy...  Agile Analysis ...  Permission-Based Roles in User Stories

Community Blog - Latest Posts

EA Learning
EA Learning
I recently walked into a large shopping centre on a mission to buy a christening present for a friends son. I was very clear on what I wanted I just needed to find it… I was on my lunch break so I need to get the job done as I had a meeting that I needed to attend back in the office straight after lunch! I am not a frequent shopper and to b...
0 Responses
BusinessAnalysisHub
BusinessAnalysisHub
Have you woken up in the middle of night thinking how am I going to steer my team, give them the direction that they need but at the same time not constraint in what they want to build/deliver. I recently went through one of these night- I have joined an interesting project where we have very tight timescale to deliver a tech product to operational...
0 Responses
Peter
Peter
If you are building a reusable Security Product tool to specifically address Security Technical Implementation Guide (STIG)  Findings, should the requirements be considered Non Functional Requirements or Functional Requirements? For example if there are a number of STIGs such as: The minimum password length shall be 15 characters ...
1 Responses


Upcoming Live Webinars



Latest Articles

The damaging consequences of organizational amnesia, and how BAs can help prevent and remediate them
Nov 19, 2017
0 Comments
Imagine that a business analyst has been assigned to write the requirements for a new system replacing the company’s legacy CRM (customer relati...
Featured Digital Library Resources 
Copyright 2006-2015 by Modern Analyst Media LLC