Page History

...

A set of Permissions is configured for each role. Each Permissions set can be inspected by clicking on the default from the list of roles, which will open the Permissions tab for the Role. An example Permissions set is described in the next section. A matrix showing the default Roles and their Permissions along with a description of the Permission is provided in the JS7 - Permissions article.

The Permissions Sub-View

The main purpose of the Permissions view is to allow Folders and Permissions to be configured for each Role.

Folder Selection

Folders are added using the Add Folder button shown in the background of the screenshot below, at the top right.

Image Modified

Folders themselves are selected from a simple tree view of the folders. This tree view is opened by clicking on the folder symbol shown in the screenshot.

Permissions Configuration

Two editors are available for the configuration of the Permissions granted for a Role:

• A graphical editor as shown in the next screenshot:
  Image Modified
• Changes to the Permissions tree are saved in the database.
• The Undo button allows the last 10 changes made to be undone stepwise.
  • The states saved in the Undo button will be deleted when the Permissions tab is left.
• The Reset button changes the Permissions tree back to the initial state when the Permissions Tab was opened.
  • The state stored in the Reset button will be deleted when the Permissions tab is left.
• Clicking on the middle of a Permission icon will grant the Permission for the current Role.
  
  • Granted Permissions have a blue background and are by default recursive.
• The "+" and "-" symbols at the right of each Permission icon open and close child branches.
• The "-" and "+" symbols at the left of each Permission icon are used to revoke a higher Permission and are by default recursive.
  • Permission icons affected by revoked Permissions are shown with a gray background 
    
    
• A list editor as shown in the next screenshot:
  Image Added
  
  • Individual Permissions can be modified and removed from the Role using the pencil and X symbols that are blended in when the user's mouse is moved over a Permission:
  • The Edit function allows the Permission to be made subtractive - i.e. for permission granted at a higher level to be removed.
  • The Folder part of the view is for restricting the Role to accessing particular Folders - and thereby particular workflow.

Shiro Identity Service Settings

...