Setting permissions

Configuring Viewpoint > Configuring security in Viewpoint > Configuring the permissions map > Setting permissions

2.4.6.1 Setting permissions

Links and menu items (see Creating links on the Viewpoint menu bar) can be filtered according to a user's permissions when they log in. That is, if the user does not have the permission associated with a navigation item, it is not displayed.

To set a permission

Choose a permission to use: you may either create a custom permission or use a preexisting one from the table below.

Define a permission if you are not using a preexisting one from the table below. To do so:

Open the core.xml file located in the Viewpoint home directory.
Find the <role-definition> element and choose or create a role to grant the permission.
Specify the role with <definition name="role_name">

The role must be defined in the permissions map. See Configuring the permissions map)

Create the permission, specifying a unique name for it. Place it inside of the <definition> element.

<permission name=”permission.name” />

Set one of the following preexisting permissions to grant access to the associated page.

Permission	Associated page(s)	Allowed action(s)
cart.delete	Cart, Cart Details	Lets users delete items from the cart.
cart.read	Cart, Cart Details	Lets users view the cart and Cart Details page.
cart.update	Cart, Cart Details	Lets users add items to the cart and modify items in the cart.
dashboard.node.read	View Nodes	Lets users view the view nodes on the View Nodes page.
event.read	Event Logs	Lets users view the Event Logs page.
job.create	Submit Job, Job Management	Lets users create a job.
job.delete	Job Management	Lets users delete a job
job.form.read	Submit Job	Lets users view a job submission form.
job.form.readall	Submit Job	Lets users view all job submission forms.
job.form.create	Submit Job	Lets users create a new job submission form.
job.read	Job Management, View Jobs	Lets users view their own jobs and job details.
job.readall	Job Management, View Jobs	Lets users view all jobs and job details (HPC Suite only).
job.update	Job Management	Lets users modify their own jobs.
job.updateAll	Job Management	Lets users modify all jobs.
mail	Contact Us	Lets users send mail to administrators from the Contact Us page.
nav.admin	---	Generic administrator permission.
nav.user	---	Generic user permission.
node.create	Node Management	Lets users provision nodes.
node.delete	Node Management	Lets users delete nodes.
node.modify.power	Node Management	Lets users power nodes on and off.
node.modify.reprovision	Node Management	Lets users repovision nodes.
node.read	Node Management	Lets users view nodes and node details.
node.update	Node Management	Lets users modify node information.
pending-actions.read	Requested Actions	Lets users view their own requested actions.
pending-actions.readall	Requested Actions	Lets users view all requested actions.
policy.node.read	Policy Management - Allocation Policy	Lets users view the policy settings.
policy.node.update	Policy Management - Allocation Policy	Lets users edit the policy settings.
report.read	Reports	Lets users view the Reports page.
report.adaptive.*	Reports	Lets users view all available reports.
reservation.create	Create Reservation	Lets users create reservations.
reservation.delete	Reservation Management	Lets users cancel reservations.
reservation.read	Reservation Management, View Reservations	Lets users view their own reservations and reservation details.
reservation.readall	Reservation Management, View Reservations	Lets users view all reservations and reservation details.
reservation.update	Reservation Management	Lets users update reservation information.
server.about	Configuration	Lets users see diagnostics on the Configuration page.
user.*	User Management	Lets users manage Viewpoint users.

Assign the permission to a link, page, gadget, report, component, or button using the <permission> element inside of the associated item. For example:

<permission name="report.read" />