Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: 'Granting Folder Permissions' added

...

The Folder part of the view is for restricting the Role to accessing particular Folders - and thereby particular Jobs, Job Chains, etc - within a JobScheduler Master's live folder and will be described later.

Editing Permissions will also be is described laterbelow.

Initial Configuration

Adding User Accounts and Roles

...

In addition, the same article contains a link to a full list of all Permissions that can be granted.

Anchor
Editing Permissions
Editing Permissions
Editing User Permissions

Permissions Structure

Permissions are hierarchical:

...

Users have to have a Role with the following Permission - or higher - before they are able to log into the JOC Cockpit:

...

Folders are used to restrict User access to JobScheduler Objects such as Jobs, Orders and Schedules. This means that, for example, Users can be can be restricted to accessing only Objects for particular mandators / clients.

By default Permissions are granted for all the folders within a JobScheduler's live folder. However Roles can be restricted to accessing specific folders within a live folder.

This is done by granting a Folder Permission, i.e. Permissions to view the content of a Folder. When this is done, the Permissions to view all other Folders are automatically revoked.

Granting Folder Permissions

Folder Permissions are granted in the Permissions View, which is always accessed within the context of a particular Role.

 

 

. Note that before Folder Permissions can be saved for a Role, the Role has to be specified for a User. In the example below, a demo_user and demo_role as well as a demo Folder have already been configured.

To open the Permissions view for a particular Role, first open the Manage Accounts Masters view and select the Role that is to be granted Folder Permissions. To do this, click on the Role name in the Roles list.

Now click on the Add Folders button and in the Add Folders modal window, specify the folder Path either by:

  • entering the Path relative to the JobScheduler Master's live Folder (e.g. /demo or /demo/*) or
  • clicking on the folder icon to open a tree view of the live Folder and selecting the Folder as shown in the screenshot below:
    Image Added
    Note that the JobScheduler will have to be restarted if the Folder for the Permissions has been added with a File manager - and not JOE - before the folder will show in the tree view.

Check the Recursive box in the Add Folders modal window if required and then click on Submit.

Any User that is allocated this demo_role will now only be able to see JobScheduler Objects in the demo_folder.

Note that the demo_user will only be able to log in to the JOC Cockpit if they have at least one Role granting them the following Permission:

  • sos:products:joc_cockpit:jobscheduler_master:view:status

Roles with Folder Permissions are often configured for Users in combination with default Roles. For example, if the demo_user described here was allocated the it_operator Role in addition to the demo_role, they would be able to carry out the tasks allowed by the default IT Operator Permissions but only for JobScheduler Objects in the demo folder and, if configured, its child Folders. See the Use Case below for an example configuration.