Wiki source code of acls
Last modified by Aurelie Bertrand on 2023/12/20 11:54
Show last authors
author | version | line-number | content |
---|---|---|---|
1 | Sommaire : | ||
2 | |||
3 | {{toc/}} | ||
4 | |||
5 | = Authorization = | ||
6 | |||
7 | Authorizations are grouped into 7 sections according to their influence on DigDash Enterprise. | ||
8 | |||
9 | == DigDash Enterprise Administration Permissions == | ||
10 | |||
11 | **Admin> Edit user attributes** | ||
12 | |||
13 | Users can change the attributes of a user in the "Configuration / User management" page (requires "Admin> Manage users"). | ||
14 | |||
15 | **Admin> Manage license** | ||
16 | |||
17 | Users can enter the license key provided to them. They can also add or delete users to the license. | ||
18 | |||
19 | This authorization allows access to the following: | ||
20 | |||
21 | * __From the DigDash Enterprise home page __: Access to the "Configuration / License management" page | ||
22 | * __From Enterprise Studio __: Ability to add a "License" tab to Enterprise Studio (after opening the **Tools / Options** menu , check "License" in the **Interface** tab ). | ||
23 | |||
24 | **Admin> Manage permissions** | ||
25 | |||
26 | Users can assign / delete permissions to a user in the "Configuration / User management" page (requires "Admin> Manage users"). | ||
27 | |||
28 | **Admin> Manage documents** | ||
29 | |||
30 | Users can add documents to the document server. They can also update existing documents on the server and delete them. | ||
31 | |||
32 | This authorization allows access to the following: | ||
33 | |||
34 | * __From the DigDash Enterprise home page __: Access to the page | ||
35 | |||
36 | "Configuration / Document Management" | ||
37 | |||
38 | * __From Enterprise Studio __: | ||
39 | |||
40 | ◦ Access to the **Tools \ Manage documents** menu | ||
41 | |||
42 | ◦ Possibility of adding a "Documents" tab to Enterprise Studio (after opening the **Tools / Options** menu , check "Documents" in the **Interface** tab ). | ||
43 | |||
44 | **Admin> Manage authorization groups** | ||
45 | |||
46 | Users can assign / delete authorization groups to a user in the "Configuration / User management" page (requires "Admin> Manage users"). | ||
47 | |||
48 | **Admin> Manage servers** | ||
49 | |||
50 | Users can view and modify the parameters of the DigDash Enterprise servers (Enterprise server, LDAP server, ...). | ||
51 | |||
52 | This authorization allows access to the following: | ||
53 | |||
54 | * __From the DigDash Enterprise home page __: | ||
55 | |||
56 | ◦ Access to the "Configuration / Server settings" page | ||
57 | |||
58 | ◦ Access to the "Configuration / Server status" page in management mode | ||
59 | |||
60 | * __From Enterprise Studio __: Possibility of adding a "Servers" tab and a "Status" tab to Enterprise Studio (after opening the **Tools / Options** menu , check "Servers" or "Status" in the **Interface** tab ) | ||
61 | |||
62 | **Admin> Manage users** | ||
63 | |||
64 | Users can create, modify, and delete users and roles. | ||
65 | |||
66 | This authorization allows access to the following: | ||
67 | |||
68 | * __From the DigDash Enterprise home page __: Access to the "Configuration / Configuration of users" page | ||
69 | * __From Enterprise Studio __: Ability to add a "Users" tab to Enterprise Studio (after opening the **Tools / Options** menu , check "Users" in the **Interface** tab ) | ||
70 | |||
71 | **Admin> Manage all roles** | ||
72 | |||
73 | Users can manage all roles on the "Configuration / User management" page (requires "Admin> Manage users"), including those to which they are not attached. Without this authorization, users can only manage the roles to which they are attached and in which they have write rights (since version 2017R1). | ||
74 | |||
75 | **Admin> Restore configuration** | ||
76 | |||
77 | **Admin> Save configuration** | ||
78 | |||
79 | Users can back up or restore the DigDash Enterprise configuration. | ||
80 | |||
81 | This authorization allows access to the following: | ||
82 | |||
83 | * __From the DigDash Enterprise home page __: Access to the page | ||
84 | |||
85 | "Configuration / Management of backups / Backup" or | ||
86 | |||
87 | "Configuration / Management of backups / Restore" | ||
88 | |||
89 | **Admin> View server status** | ||
90 | |||
91 | Users can view the status of the server (memory, connected sessions, refresh, etc.). They can also act on this state if they have the "Admin> Manage servers" right. | ||
92 | |||
93 | This authorization allows access to the following: | ||
94 | |||
95 | * __From the DigDash Enterprise home page __: access to the "Configuration / Server status" page | ||
96 | * __From Enterprise Studio __: possibility to add a "Server status" tab to Enterprise Studio (after opening the **Tools / Options** menu , check "Server status" in the **Interface** tab ). | ||
97 | |||
98 | == Permissions related to publishing content to a document server == | ||
99 | |||
100 | **Content> Update document** | ||
101 | |||
102 | **Content> Submit a document** | ||
103 | |||
104 | Depending on the authorization granted, the user can add or update documents. | ||
105 | |||
106 | These permissions allow access to the following: | ||
107 | |||
108 | * __From the dashboard __: If the user has the "Submit a document" permission, he can add a new document to the server from a "Documents" portlet ( **Add document** button ). | ||
109 | |||
110 | If the user also has the "Update document" permission, he can add an existing document to the server in order to update it ( **Add document** button ). | ||
111 | |||
112 | If the user does not have the "Submit a document" permission, the **Add document ** button is not present in the "Documents" portlet | ||
113 | |||
114 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_b30a930cd3267480.jpg?rev=1.1||alt="configuration_guide_fr_html_b30a930cd3267480.jpg"]] | ||
115 | |||
116 | * __From Enterprise Studio __: If the user has the "Submit a document" permission, he can add a new document to the server when creating a data source ( **Add file to server** button ). | ||
117 | |||
118 | If the user also has the "Update document" permission, he can add an existing document to the server in order to update it ( **Add file to server** button **)** . | ||
119 | |||
120 | If the user does not have the "Submit a document" permission, the button | ||
121 | |||
122 | **Add a file to the server ** is grayed out | ||
123 | |||
124 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_a1b122946ca6adcc.jpg?rev=1.1||alt="configuration_guide_fr_html_a1b122946ca6adcc.jpg"]] | ||
125 | |||
126 | == Feed refresh permissions == | ||
127 | |||
128 | **Scheduler> {{glossaryReference glossaryId="Glossary" entryId="Rafraîchissement"}}Schedule{{/glossaryReference}} refreshes** | ||
129 | |||
130 | Users can program the refresh rate of an information portfolio or data source. | ||
131 | |||
132 | __Note__ : In order for the data sources and information flows to be updated during the refresh, you must add the following permissions to the user: | ||
133 | |||
134 | * "Portfolio> Refresh a feed" | ||
135 | * "Portfolio> Refresh a role flow" This authorization allows access to the following elements: | ||
136 | * __From Enterprise Studio __: | ||
137 | |||
138 | ◦ Programming of flows and portfolios: After right-clicking on the portfolio or flow, **Properties** menu **…** , adding a programming from the **Programming** tab **:** | ||
139 | |||
140 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_c6a730fc5635644e.jpg?rev=1.1||alt="configuration_guide_fr_html_c6a730fc5635644e.jpg"]] | ||
141 | |||
142 | ◦ Programming of data sources: After editing the data source, adding a programming from the **Refresh** tab **:** | ||
143 | |||
144 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_22f3f220f502b4e6.jpg?rev=1.1||alt="configuration_guide_fr_html_22f3f220f502b4e6.jpg"]] | ||
145 | |||
146 | == Information portfolio permissions == | ||
147 | |||
148 | **Portfolio> Add a feed** | ||
149 | |||
150 | Users can add an information feed to a personal information portfolio | ||
151 | |||
152 | This authorization allows access to the following: | ||
153 | |||
154 | * __From Enterprise Studio __: Adding an information flow in the user's portfolio | ||
155 | |||
156 | **Portfolio> Add a role feed** | ||
157 | |||
158 | Users can add an information flow to a role information portfolio, if they have write access to this role. This authorization allows access to the following: | ||
159 | |||
160 | * __From Enterprise Studio __: Adding an information flow to the user role portfolio | ||
161 | * __From the dashboard __: Addition of an information flow in the portfolio of a role from a "Query on data" window. The user must also have the “Portfolio> Save the portfolio of a role” authorization. | ||
162 | |||
163 | **Portfolio> Open a role's portfolio** | ||
164 | |||
165 | Users can open role portfolios. | ||
166 | |||
167 | This authorization allows access to the following: | ||
168 | |||
169 | * __From Enterprise Studio __: **File** menu **\ Open** then access to user role portfolios. | ||
170 | |||
171 | **Portfolio> Refresh a feed** | ||
172 | |||
173 | Users can refresh the flow of their personal information portfolios. | ||
174 | |||
175 | This authorization allows access to the following: | ||
176 | |||
177 | * __From Enterprise Studio __: After right-clicking on a personal information flow, access to the **Update history** , **Clear history** , **Synchronize ** and **Synchronize** menus **for all users** . | ||
178 | |||
179 | **Portfolio> Refresh a role flow** | ||
180 | |||
181 | Users can refresh the flow of information created for roles (users must also have the "Portfolio> Refresh flow" permission), if he has the right to refresh on this role. | ||
182 | |||
183 | This authorization allows access to the following: | ||
184 | |||
185 | * __From Enterprise Studio __: After right-clicking on a role feed, access to the **Update history** , **Clear history** , **Synchronize ** and **Synchronize** menus **for all users** . | ||
186 | |||
187 | **Portfolio> Save the portfolio from a role** | ||
188 | |||
189 | Users can modify the portfolios created for roles. | ||
190 | |||
191 | This authorization allows access to the following: | ||
192 | |||
193 | * __From Enterprise Studio __: | ||
194 | |||
195 | ◦ Adding a flow to the role portfolio (the user must also have the "Portfolio> Add role flow" permission) | ||
196 | |||
197 | ◦ Modification of the flows existing in the role portfolio (right click on the flow then modification of the flow from the **Properties ** menu ) ◦ Copy / Paste flows in a role portfolio. | ||
198 | |||
199 | ◦ Movement of flows in the role portfolio | ||
200 | |||
201 | ◦ Modification of the portfolio parameters (right click on the portfolio then modification of the name or scheduled refreshments) | ||
202 | |||
203 | * __From the dashboard __: Adding an information flow to a role's portfolio from a "Data request" portlet (the user must also have the "Portfolio> Add a role flow" authorization) | ||
204 | |||
205 | == Enterprise Studio permissions == | ||
206 | |||
207 | **Studio> Access to the device manager** | ||
208 | |||
209 | Users can manage the list of devices used. | ||
210 | |||
211 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
212 | |||
213 | * Access to the **Tools \ Device manager** menu | ||
214 | * Device configuration from the **Devices ** tab of information flows | ||
215 | |||
216 | **Studio> Access to the format manager** | ||
217 | |||
218 | Users can manage the list of formats. | ||
219 | |||
220 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
221 | |||
222 | * Access to the **Tools \ Format manager** menu | ||
223 | * Format management since editing data models and graph visualization parameters | ||
224 | |||
225 | **Studio> Access to the database connection manager ** Users can manage the list of connections. | ||
226 | |||
227 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
228 | |||
229 | * Access to the **Tools \ Database Connection Manager** menu | ||
230 | * Addition of a named connection since the creation of SQL, OLAP, Business Objects and NoSQL sources | ||
231 | |||
232 | **Studio> Access to the predefined functions manager** | ||
233 | |||
234 | Users can manage the list of devices used. | ||
235 | |||
236 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
237 | |||
238 | * Access to the menu **Tools \ Manager of predefined functions** | ||
239 | * Management of predefined functions from the edition of data models and graph visualization parameters | ||
240 | |||
241 | **Studio> Access to hierarchy manager** | ||
242 | |||
243 | Users can manage the list of hierarchies. | ||
244 | |||
245 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
246 | |||
247 | * Access to the **Tools \ Hierarchy manager** menu | ||
248 | * Management of hierarchies from the edition of data models** ** | ||
249 | |||
250 | **Studio> Access to the icon manager** | ||
251 | |||
252 | Users can manage icons. | ||
253 | |||
254 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
255 | |||
256 | * Access to the **Tools \ Icon manager** menu | ||
257 | * Management of icons from format editing (accessible to editing data models and parameters for viewing graphics) | ||
258 | |||
259 | **Studio> Access to the color palette manager** | ||
260 | |||
261 | Users can manage the list of color palettes. | ||
262 | |||
263 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
264 | |||
265 | * Access to the **Tools \ Color Palette Manager** menu | ||
266 | * Management of color palettes since the edition of the parameters of visualization of the graphics. | ||
267 | |||
268 | **Studio> Access to the script manager** | ||
269 | |||
270 | Users can manage script libraries. | ||
271 | |||
272 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
273 | |||
274 | * Access to the **Tools \ Script manager** menu | ||
275 | * Management of script libraries from the edition of measurements derived from a data model | ||
276 | |||
277 | **Studio> Access to the style manager** | ||
278 | |||
279 | Users can manage the style list. | ||
280 | |||
281 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
282 | |||
283 | * Access to the **Tools \ Style manager** menu | ||
284 | * Management of styles from the edition of graphic display parameters | ||
285 | |||
286 | **Studio> Access to the translation manager** | ||
287 | |||
288 | Users can manage translations. | ||
289 | |||
290 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
291 | |||
292 | * Access to the **Tools \ Translation manager** menu | ||
293 | * Management of translations of all metadata used (name of dimensions and measures, names of hierarchies, ...). | ||
294 | |||
295 | **Studio> Edit a data source** | ||
296 | |||
297 | Users can edit their data sources. | ||
298 | |||
299 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
300 | |||
301 | * Add, modify and delete a data source from the **Tools \ Data source manager** menu | ||
302 | * Modification or creation of a data source from the edition of a user flow | ||
303 | |||
304 | This authorization only concerns the user data sources, the role data sources being managed by the "Studio> Edit data source for a role" authorization. | ||
305 | |||
306 | **Studio> Edit a data source for a role** | ||
307 | |||
308 | Users can edit the data sources created for the roles. | ||
309 | |||
310 | This authorization allows access to the following elements __from Enterprise Studio__ : | ||
311 | |||
312 | * Add, modify and delete a role data source from the **Tools \ Data source manager** menu | ||
313 | * Editing or creating a data source from editing a role flow | ||
314 | |||
315 | **Studio> Ignore data model revision notes** | ||
316 | |||
317 | Users can skip entering revision notes when editing a data model __from Enterprise Studio__. Without this authorization, users are obliged to enter a non-empty revision note each time a data model is edited. | ||
318 | |||
319 | == Dashboard permissions == | ||
320 | |||
321 | **Dashboard> Display a dashboard** | ||
322 | |||
323 | Users can view their personal dashboards and those of their roles. | ||
324 | |||
325 | This authorization allows access to the following: | ||
326 | |||
327 | * "Access to dashboards" page __from the DigDash Enterprise home page__ | ||
328 | |||
329 | **Dashboard> Edit protected pages of a dashboard** | ||
330 | |||
331 | From the dashboard editor, it is possible to protect the editing of role pages by right-clicking on the page and then selecting **Protect page** . | ||
332 | |||
333 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_62286bff4908b6a8.jpg?rev=1.1||alt="configuration_guide_fr_html_62286bff4908b6a8.jpg"]] | ||
334 | |||
335 | The user with the “Dashboard> Edit protected dashboard pages” authorization can edit a protected role page. | ||
336 | |||
337 | **Dashboard> Edit a dashboard** | ||
338 | |||
339 | Users can create and modify their personal dashboards. | ||
340 | |||
341 | This authorization allows access to the following: | ||
342 | |||
343 | * "Dashboard Editor" page __from the DigDash Enterprise home page__ | ||
344 | |||
345 | This authorization does not allow editing of dashboards created for user roles (managed by the “Dashboard> Edit a role dashboard” authorization). | ||
346 | |||
347 | **Dashboard> Edit a role dashboard** | ||
348 | |||
349 | Users can create and modify dashboards for roles. | ||
350 | |||
351 | This authorization allows access to the following: | ||
352 | |||
353 | * "Dashboard Editor" page __from the DigDash Enterprise home page__ | ||
354 | |||
355 | **Dashboard> Dashboard navigation menu** | ||
356 | |||
357 | Users can save the current navigation state of a dashboard. | ||
358 | |||
359 | This authorization allows access to the following: | ||
360 | |||
361 | * __From the dashboard __, a selection menu is displayed at the top of the dashboard pages. This menu allows you to delete the filters, display the previous, next browsing state and save the current state. | ||
362 | |||
363 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_a88e0c10fe70ae6c.jpg?rev=1.1||alt="configuration_guide_fr_html_a88e0c10fe70ae6c.jpg"]] | ||
364 | |||
365 | **Dashboard> Customizing the dashboard** | ||
366 | |||
367 | This authorization allows access to the following elements __from the dashboard editor__ : | ||
368 | |||
369 | * Editing CSS from the **CSS Editor** menu | ||
370 | * Adding JavaScript from the **JavaScript Editor** menu | ||
371 | * Image backup in public mode (accessible to all users) from the **Image Management** menu . If the user does not have this authorization, the user can save images for himself or for his roles only. | ||
372 | |||
373 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_7592f49f404966d6.jpg?rev=1.1||alt="configuration_guide_fr_html_7592f49f404966d6.jpg"]] | ||
374 | |||
375 | **Dashboard> Offline dashboard** | ||
376 | |||
377 | The user can save his dashboard in offline mode. | ||
378 | |||
379 | This authorization allows access to the following: | ||
380 | |||
381 | * From the dashboard, an **Offline Mode ** menu is displayed at the top of the dashboard page. | ||
382 | |||
383 | == Authorizations linked to flow visualization == | ||
384 | |||
385 | **View> Add a comment to a feed** | ||
386 | |||
387 | **Visualization> Add a comment to a data model** | ||
388 | |||
389 | Depending on the authorization selected, users can add comments to data models and / or information flows. | ||
390 | |||
391 | These permissions allow access to the following: | ||
392 | |||
393 | * From the dashboard, add a comment from the **Add a comment ** menu appearing on the information flows. | ||
394 | |||
395 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_b5f55abd91bf5670.jpg?rev=1.1||alt="configuration_guide_fr_html_b5f55abd91bf5670.jpg"]] | ||
396 | |||
397 | Adding comments can be done on the data model or the flow (depending on user permissions). | ||
398 | |||
399 | If the user has two permissions ("View> Add a comment to a data model" and "View> Add a comment to a stream"), the comment is added to the data model by default. The user must check the **Only on this graph box ** for the comment to be added to the feed. | ||
400 | |||
401 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_d7f6b5ee21379e3c.jpg?rev=1.1||alt="configuration_guide_fr_html_d7f6b5ee21379e3c.jpg"]] | ||
402 | |||
403 | **View> Send an SMS** | ||
404 | |||
405 | From the dashboard editor, the user can send an SMS indicating the URL of the dashboard on a mobile device. | ||
406 | |||
407 | The button for sending this SMS only appears if the SMS configuration defined in the "Server settings" page is valid. | ||
408 | |||
409 | **Visualization> Navigate in a diagram** | ||
410 | |||
411 | Users can navigate the data displayed in the graphs of their dashboards. | ||
412 | |||
413 | This authorization allows access to the following elements from the dashboard: | ||
414 | |||
415 | * Filtering the values displayed in the diagrams from the interactive filter bar displayed at the top of the page (if the user does not have this authorization, the filter boxes are not displayed). | ||
416 | |||
417 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/user_guide/information_flow/studio/WebHome/studio_guide_fr%20%281%29_html_f3d4bf974f2e899f.jpg?rev=1.1||alt="configuration_guide_fr_html_f3d4bf974f2e899f.jpg"]] | ||
418 | |||
419 | * Interactive filtering from the windows displaying the dimension values (if the user does not have this authorization, the dimension windows displays an error). | ||
420 | |||
421 | **View> Print a graph** | ||
422 | |||
423 | **Visualization> Save as CSV** | ||
424 | |||
425 | **View> Save as PDF** | ||
426 | |||
427 | **Visualization> Save as PPT Visualization> Save as XLS** | ||
428 | |||
429 | **View> Save to XLS (without styles)** | ||
430 | |||
431 | Users can save the elements of their dashboards in the authorized formats: PDF, PPT, XLS (with or without the styles for the tables) or CSV. They can also print them individually. | ||
432 | |||
433 | This authorization allows access to the following: | ||
434 | |||
435 | * From the dashboard, save information flows from the Save menus ( **Save in PDF** , **Save in PPT** , **Save in XLS** , **Save in XLS (without styles)** , **Save in CSV** , **Print** ) | ||
436 | |||
437 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_5f644826e867a3cc.jpg?rev=1.1||alt="configuration_guide_fr_html_5f644826e867a3cc.jpg"]] | ||
438 | |||
439 | **View> Delete a feed comment** | ||
440 | |||
441 | **View> Delete a data model comment** | ||
442 | |||
443 | **View> See comments** | ||
444 | |||
445 | From the dashboard, users can view and delete comments on data models or flows. | ||
446 | |||
447 | These permissions allow access to the following: | ||
448 | |||
449 | * From the dashboard, display comments from the **View comments ** menu appearing on items of information flow type. | ||
450 | |||
451 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/WebHome/configuration_guide_fr_html_b5f55abd91bf5670.jpg?rev=1.1||alt="configuration_guide_fr_html_b5f55abd91bf5670.jpg"]] | ||
452 | |||
453 | * If the user has sufficient permissions, delete the comment by clicking on the red cross to the right of the comment: | ||
454 | |||
455 | [[image:https://doc.digdash.com/xwiki/bin/download/Digdash/deployment/configuration/configuration_guide/IV_annexes/WebHome/1594033130260-728.png?rev=1.1||alt="1594033130260-728.png"]] |