powered by CADENAS

Manual

Manual

1.3.10. Roles / Rights

Roles and rights are set via configuration file $CADENAS_SETUP/partwarehouse/accessrights.cfg.

Preparation:

In order to be able to perform settings for catalog and subdirectories you need the internal IDs CatalogID and Identification.

  1. Under Extras -> Settings... open the settings dialog.

  2. On the left side, select PARTdataCenter -> General.

  3. Then under Show internal ids for attributes, classes and products activate the checkbox.

    -> Now on the tabbed page Properties, you can see the fields CatalogID and Identification in addition. Exactly this additional information is needed in order to perform certain settings in the configuration file.

accessrights.cfg

Syntax:

Block: The block declaration is a combination of role and catalog.

[<Rolle>.<Katalog>]

Objects (keys) for which access rights (values) can be defined:

  • catalogs

  • attributes

  • products

  • classes

  • subtree.classxy

Valid access rights (values) are: (single entry or multiple entries comma separated or all)

  • read

  • add

  • modify

  • delete

  • export (just for catalogs) : Export to $CADENAS_DATA

Examples:

  • For example, you can set minimal rights (only read access) as default:

    [default]
    catalogs=read
    attributes=read
    products=read
    classes=read

  • The "Admin" role gets full access to all catalogs.

    [admin.*]
    catalogs=add,modify,delete,read,export
    attributes=add,modify,delete,read
    products=add,modify,delete,read
    classes=add,modify,delete,read

    The command "Export to PARTsolutions" is only displayed if (on the server), in the key "catalogs" the value "export" is set.

    The command "Export to PARTsolutions" is only displayed if (on the server), in the key "catalogs" the value "export" is set.

  • All roles get access for a certain catalog.

    [*.jLRR0DPBQdm3HerWv3Jwuw]
    catalogs=read
    attributes=read
    products=read

  • In addition to catalog also subdirectories can get specific access conditions.

    subtree.izWhloO_R2yDcz_5oRKGqQ=add,modify,delete

  • Specified role and catalog

    [werk1.jLRR0DPBQdm3HerWv3Jwuw]
    attributes=add,modify,delete
    products=add,modify,delete

  • One certain role and all catalogs + specification only for products

    [werk1.*]
    products=add,modify,delete

If there is only read access in the structure tree the "lock" icon is displayed.