Users and Roles - Revision history

Antti Villberg: /* Modelling */

2011-07-11T15:04:04Z

Modelling

← Older revision		Revision as of 15:04, 11 July 2011
Line 24:		Line 24:

	The ontology can be found in '''org.simantics.layer0/graph/UsersAndRoles.pgraph'''		The ontology can be found in '''org.simantics.layer0/graph/UsersAndRoles.pgraph'''

			=== Concepts ===

			* L0.RoleRule determines some user interface behaviour e.g. denial of operation or selection of actions or data.
			* L0.Role defines a hierarchy of possible roles for a user. For each role a set of rule are attached. From this information a list of rules for a certain role can be computed. The rules are interpreted in order and may override or cancel each other.
			* L0.RoleAssignment assigns a set of allowed roles for a certain user. The set of RoleAssignments are determined for each model separately. Normally RoleAssignments are contained in models but for some special cases the assignments can also be shared e.g. for the admin role.
			* L0.Session stores preferences for the database session. The session contains a set of RoleAssignments (one per model)

	=== Using the model ===		=== Using the model ===

Antti Villberg: /* Using the model */

2011-07-11T14:56:03Z

Using the model

← Older revision		Revision as of 14:56, 11 July 2011
Line 29:		Line 29:
	The following guidelines are defined		The following guidelines are defined

	* The '''active ~~session~~ role''' ~~is defined in~~ the session ~~model~~		* The set of RoleAssignments from the session model are used to determine the '''model active role''' for the session
	* Available users can be found under http://Users		* Available users can be found under http://Users
	* All roles defined in a model can be found by searching L0.Role in '''dependencies'''		* All roles defined for a model can be found by searching L0.Role in '''dependencies'''
	* '''~~Available roles~~''' ~~per user are queried by filtering from all roles by L0.IsAllowedFor~~		* All role rules available for a model can be found by searching L0.RoleRule in '''dependencies'''
	* ~~Role-based rules are bound to models and~~ can be ~~queried~~ by searching L0.~~RoleRule~~ in ~~model~~ '''dependencies''' and by filtering ~~to a selected role.~~		* All role assignments for a model can be found by searching L0.RoleAssignment in '''dependencies'''
	* The '''active role rule ~~set~~''' is obtained by determining ~~role-based rules for~~ the '''active ~~session~~ role'''		* '''Available roles''' for the session per model are queried by determining all role assignments and by filtering by user
	* Application code decides how to interpret the active role rule ~~set~~.		* The '''active role rule list''' is obtained by first determining the '''model active role''' and then by traversing the inheritance chain.
			* Application code decides how to interpret the active role rule list.

	[[Category: Model Development]]		[[Category: Model Development]]

Antti Villberg: /* Modelling */

2011-07-11T14:50:25Z

Modelling

← Older revision		Revision as of 14:50, 11 July 2011
Line 19:		Line 19:
	== Modelling ==		== Modelling ==

	[[Image:UsersAndRoles.png~~\|400px~~]]		[[Image:UsersAndRoles.png]]

	[[File:UsersAndRoles.graphml]]		[[File:UsersAndRoles.graphml]]

Antti Villberg: /* Modelling */

2011-07-11T14:49:29Z

Modelling

← Older revision		Revision as of 14:49, 11 July 2011
Line 19:		Line 19:
	== Modelling ==		== Modelling ==

	[[Image:UsersAndRoles.png]]		[[Image:UsersAndRoles.png\|400px]]

	[[File:UsersAndRoles.graphml]]		[[File:UsersAndRoles.graphml]]

Antti Villberg: /* Modelling */

2011-07-11T14:48:57Z

Modelling

← Older revision		Revision as of 14:48, 11 July 2011
Line 19:		Line 19:
	== Modelling ==		== Modelling ==

	[[Image:UsersAndRoles.png]		[[Image:UsersAndRoles.png]]

	[[File:UsersAndRoles.graphml]]		[[File:UsersAndRoles.graphml]]

Antti Villberg: /* Modelling */

2011-07-11T14:48:48Z

Modelling

← Older revision		Revision as of 14:48, 11 July 2011
Line 19:		Line 19:
	== Modelling ==		== Modelling ==

	[[Image:UsersAndRoles.png~~\|200px]~~]		[[Image:UsersAndRoles.png]

	[[File:UsersAndRoles.graphml]]		[[File:UsersAndRoles.graphml]]

Antti Villberg: /* Modelling */

2011-07-11T14:48:36Z

Modelling

← Older revision		Revision as of 14:48, 11 July 2011
Line 19:		Line 19:
	== Modelling ==		== Modelling ==

	[[Image:UsersAndRoles.png]]		[[Image:UsersAndRoles.png\|200px]]

	[[File:UsersAndRoles.graphml]]		[[File:UsersAndRoles.graphml]]

Antti Villberg: /* Using the model */

2011-07-11T12:08:45Z

Using the model

← Older revision		Revision as of 12:08, 11 July 2011
Line 32:		Line 32:
	* Available users can be found under http://Users		* Available users can be found under http://Users
	* All roles defined in a model can be found by searching L0.Role in '''dependencies'''		* All roles defined in a model can be found by searching L0.Role in '''dependencies'''
	* '''Available roles''' per user are ~~queries~~ by filtering from all roles by L0.IsAllowedFor		* '''Available roles''' per user are queried by filtering from all roles by L0.IsAllowedFor
	* Role-based rules are bound to models and can be queried by searching L0.RoleRule in model '''dependencies''' and by filtering to a selected role.		* Role-based rules are bound to models and can be queried by searching L0.RoleRule in model '''dependencies''' and by filtering to a selected role.
	* Application code decides how to interpret the active rule set.		* The '''active role rule set''' is obtained by determining role-based rules for the '''active session role'''
			* Application code decides how to interpret the active role rule set.

	[[Category: Model Development]]		[[Category: Model Development]]

Antti Villberg: /* Using the model */

2011-07-11T12:07:38Z

Using the model

← Older revision		Revision as of 12:07, 11 July 2011
Line 32:		Line 32:
	* Available users can be found under http://Users		* Available users can be found under http://Users
	* All roles defined in a model can be found by searching L0.Role in '''dependencies'''		* All roles defined in a model can be found by searching L0.Role in '''dependencies'''
			* '''Available roles''' per user are queries by filtering from all roles by L0.IsAllowedFor
	* Role-based rules are bound to models and can be queried by searching L0.RoleRule in model '''dependencies''' and by filtering to a selected role.		* Role-based rules are bound to models and can be queried by searching L0.RoleRule in model '''dependencies''' and by filtering to a selected role.
	* Application code decides how to interpret the active rule set.		* Application code decides how to interpret the active rule set.

	[[Category: Model Development]]		[[Category: Model Development]]

Antti Villberg: /* Using the model */

2011-07-11T12:06:19Z

Using the model

← Older revision		Revision as of 12:06, 11 July 2011
Line 29:		Line 29:
	The following guidelines are defined		The following guidelines are defined

	* The '''session role''' is defined in the session model		* The '''active session role''' is defined in the session model
	* Available users can be found under http://Users		* Available users can be found under http://Users
	* All roles defined in a model can be found by searching L0.Role in '''dependencies'''		* All roles defined in a model can be found by searching L0.Role in '''dependencies'''