Permissions

Attach user roles to configurations. Access is granted only to security roles listed in the roles Property.

    {
      "name": "locations",
      ...
      "roles": ["MAXEVERYONE"],
      ...
    }

You can bypass authorization by special role "SKIP-AUTHORIZATION".

Trees can be set to non-editable via rolesReadonly. For this feature, the insight-userprofile.json must contain an attribute with "roles" label. The node of the attribute must list all roles of the user. Examples below:

!!! rolesReadonly is currently only a client feature and there is no server side check yet. !!!

    {
      "roles": ["planner", "viewer"],
      "rolesReadonly": ["viewer"],
    }

User has: "viewer" -> Readonly = true

    {
      "roles": ["planner", "viewer"],
      "rolesReadonly": ["viewer"],
    }

User has: "worker", "viewer" -> Readonly = true

    {
      "roles": ["planner", "viewer"],
      "rolesReadonly": ["viewer"],
    }

User has: "planner" -> Readonly = false

    {
    "roles": ["planner", "viewer"],
    "rolesReadonly": ["viewer"],
    }

User has: "planner", "viewer" -> Readonly = false

Example: insight-userprofile.json

    ...
    "children": [
      {
        "name": "roles",
        "title": "Roles",
        "label": "${name}",
        "type": "USER_ROLE",
        "query": {
          "constraint": "user = ${login}"
        },
        "attributes": [
          {
            "name": "name",
            "label": "roles",
            "readonly": true
          }
        ]
      }
    ]