2.4.6.1 Setting permissions

Links and menu items (see Creating links on the Viewpoint menu bar) can be filtered according to a user's permissions when they log in. That is, if the user does not have the permission associated with a navigation item, it is not displayed.

To set a permission

1. Choose a permission to use: you may either create a custom permission or use a preexisting one from the table below.
• Define a permission if you are not using a preexisting one from the table below. To do so:
1. Open the core.xml file located in the Viewpoint home directory.
2. Find the <role-definition> element and choose or create a role to grant the permission.
3. Specify the role with <definition name="role_name">

The role must be defined in the permissions map. See Configuring the permissions map)

4. Create the permission, specifying a unique name for it. Place it inside of the <definition> element.

<permission name=”permission.name” />

• Set one of the following preexisting permissions to grant access to the associated page.

Permission	Associated page(s)	Allowed action(s)
cart.delete	Cart, Cart Details	Lets users delete items from the cart.
cart.read	Cart, Cart Details	Lets users view the cart and Cart Details page.
cart.update	Cart, Cart Details	Lets users add items to the cart and modify items in the cart.
dashboard.node.read	View Nodes, View Services	Lets users view the view nodes on the View Nodes page and the View Services page.
event.read	Event Logs	Lets users view the Event Logs page.
job.create	Submit Job, Job Management	Used for Moab HPC Suite.
job.delete	Job Management	Used for Moab HPC Suite.
job.form.read	Submit Job	Used for Moab HPC Suite.
job.form.readall	Submit Job	Used for Moab HPC Suite.
job.form.create	Submit Job	Used for Moab HPC Suite.
job.read	Job Management, View Jobs	Used for Moab HPC Suite.
job.readall	Job Management, View Jobs	Used for Moab HPC Suite.
job.update	Job Management	Used for Moab HPC Suite.
job.updateAll	Job Management	Used for Moab HPC Suite.
mail	Contact Us	Lets users send mail to administrators from the Contact Us page.
nav.admin	---	Generic administrator permission.
nav.user	---	Generic user permission.
node.create	Node Management	Lets users provision nodes.
node.delete	Node Management	Lets users delete nodes.
node.modify.power	Node Management	Lets users power nodes on and off.
node.modify.reprovision	Node Management	Lets users repovision nodes.
node.read	Node Management	Lets users view nodes and node details.
node.update	Node Management	Lets users modify node information.
pending-actions.read	Requested Actions	Lets users view their own requested actions.
pending-actions.readall	Requested Actions	Lets users view all requested actions.
policy.node.read	Policy Management - Allocation Policy	Lets users view the policy settings.
policy.node.update	Policy Management - Allocation Policy	Lets users edit the policy settings.
policy.vm.read	Policy Management - VM Policies	Lets users view the policy settings.
policy.vm.update	Policy Management - VM Policies	Lets users edit the policy settings.
report.read	Reports	Lets users view the Reports page.
report.adaptive.*	Reports	Lets users view all available reports.
reservation.create	Create Reservation	Lets users create reservations.
reservation.delete	Reservation Management	Lets users cancel reservations.
reservation.read	Reservation Management, View Reservations	Lets users view their own reservations and reservation details.
reservation.readall	Reservation Management, View Reservations	Lets users view all reservations and reservation details.
reservation.update	Reservation Management	Lets users update reservation information.
server.about	Configuration	Lets users see diagnostics on the Configuration page.
user.*	User Management	Lets users manage Viewpoint users.
vc.create	Catalog Management	Lets users create a service template.
vc.delete	Catalog Management	Lets users delete a service template.
vc.deleteChild	View services	Lets users delete child services within a container service. Grant this permission judiciously. Deleting a child service will affect everything connected to it, including other services that depend on or use it.
vc.read	Catalog Management, Service Catalog	Lets users view the Service Catalog.
vc.update	Catalog Management	Lets users modify service templates.
vm.create	VM Management	Lets users create VMs.
vm.delete	VM Management	Lets users delete VMs.
vm.migrate	VM Management	Lets users migrate VMs.
vm.modify.alias	VM Management	Lets users modify VMs.
vm.modify.migrate	VM Management	Lets users migrate their own VMs.
vm.modify.migrateAll	VM Management	Lets users migrate all VMs.
vm.modify.reprovision	VM Management	Lets users reprovision VMs.
vm.modify.startStop	VM Management	Lets users power their own VMs on and off.
vm.modify.startStopAll	VM Management	Lets users power all VMs on and off.
vm.read	VM Management, View Nodes, View Services	Lets users view their own VMs and VM details
vm.readall	VM Management, View Nodes, View Services	Lets users view all VMs and VM details.

2. Assign the permission to a link, page, gadget, report, component, or button using the <permission> element inside of the associated item. For example:

<permission name="report.read" />

Related topics 

• Configuring the permissions map
• Filtering navigation with permissions

© 2012 Adaptive Computing