Skip to main content

Permissions

Description:

The purpose of a permission is to allow access to information or functionality to certain users only. Most permissions are self explaining, but if more information are required click on the intent of the permission. The intent for example for "create User" would be global.createUser. A complete list of all existing permissions can be found at the end of this document.

Global permissions#

Description:

All permissions not limited to projects, subprojects or workflowitems are global permissions. Global permissions can be added to users or to groups. All global permissions are documented at the bottom of this document.

New permissions#

Description:

Once a user/group is created, administrators can grant/revoke global permissions for them.

Admin permissions#

Description:

A sample set of global permissions are:

  • ... create projects
  • ... create user/group
  • ... grant/revoke global permissions to others
  • ... access the nodes section

Instructions:

  1. Click the button in the upper left corner to open the side-navigation-bar
  2. Click the "User" menu point
  3. Click the lock item in line of the user that you want to grant/revoke permissions..
  4. Select the permissions that you want to grant/revoke

open global permission dialog

Project permissions#

Description:

These section describes all permissions related to a project. Selecting a user or group grant them the specific permission and deselecting revoke them the specific permissions.

Instructions:

  1. Click the button in the upper left corner to open the side-navigation-bar
  2. Click the "Projects" menu point
  3. Click the lock icon in the bottom right corner of a project to open the permissions dialog
  4. After selecting/deselecting certain users or groups click on submit to open a confirmation
  5. If additional permissions are required the confirmation dialog lists these.
  6. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
  7. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

open project permission dialog

note
  • More information about a specific intent can be found in the project section.
  • The user who created the project is automatically assigned to it.
  • Granting assign permissions also grants view permission-permissions because it is needed in the assign process.
  • More information about the confirmation dialog can be found in the confirmation section.

View permissions#

Description:

  • "view project in overview" : show the project on the overview site
  • "view project details" : show the project's details by accessing the project details site
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Write permissions#

Description:

  • "Create subprojects" : create a subproject
  • "Assign project to others" : assign a user/group to a project
  • "Close project" : close a project
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions#

Description:

  • "View permissions" : show which user/group has which permission on the project
  • "Grant permissions" - grant project permissions to a user/group
  • "Revoke permissions" - revoke project permissions from a user/group
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Subproject permissions#

Description:

These section describes all permissions related to a subproject

Instructions:

  1. Click the button in the upper left corner to open the side-navigation-bar
  2. Click the "Projects" menu point
  3. Click the blue magnifier icon in the bottom right corner of a project
  4. Click the lock icon on the right of the subproject to open the permissions dialog
  5. After selecting/deselecting certain users or groups click on submit to open a confirmation
  6. If additional permissions are required the confirmation dialog lists these.
  7. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
  8. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

open subproject permission dialog

note

More information about a specific action on a subproject can be found in the subproject section.

View permissions#

Description:

Following intents do exist related to view permissions of a subproject:

  • "view subproject overview" : show the subproject on the project detail site
  • "view subproject details" : show the subproject's details by accessing the subproject details site
note
  • If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)
  • "view project overview" and "view project details" are also required to view a subproject

Write permissions#

Description:

Following intents do exist related to write permissions of a project:

  • "Create workflow items" : create a workflowitem
  • "Update subproject" : edit title, currency, comment or budget amount of the subproject
  • "Assign subproject" : assign a user/group to the subproject
  • "Close subproject" : close the subproject
  • "Reorder workflow items" : reorder workflowitems that are not redacted/closed
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions#

Description:

  • "View subproject permissions" : show which user/group has which permission on the subproject
  • "Grant subproject permissions" - grant subproject permissions to a user/group
  • "Revoke subproject permissions" - revoke subproject permissions from a user/group
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Workflow permissions#

Description:

These section describes all permissions related to a workflowitem

Instructions:

  1. Click the button in the upper left corner to open the side-navigation-bar
  2. Click the "Projects" menu point
  3. Click the blue magnifier icon in the bottom right corner of a project
  4. Click the grey magnifier icon on the most right of the subproject you want to view
  5. Click the lock icon on the right of the workflowitem to open the permissions dialog
  6. After selecting/deselecting certain users or groups click on submit to open a confirmation
  7. If additional permissions are required the confirmation dialog lists these.
  8. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
  9. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

open workflowitem permission dialog

note
  • More information about a specific intent can be found in the workflowitem section.
  • If a user has any write permission but no view permission the workflowitem is shown as redacted. :::

View permissions#

Description:

Following intents do exist related to view permissions of a subproject:

  • "View workflowitem" : show the workflowitem' details on the subproject detail site
  • If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)
  • "view project overview", "view project details", "view subproject overview" and "view subproject details" are also required to view a workflowitem

:::

Write permissions#

Description:

Following intents do exist related to write permissions of a project:

  • "Assign workflowitem" : assign a user/group to the workflowitem
  • "Update workflowitem" : edit title, comment, budget or add documents to the workflowitem
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions#

Description:

Following permissions do exist related to a workflowitem:

  • "View subproject permissions" : show which user/group has which permission on the workflowitem
  • "Grant subproject permissions" - grant workflowitem permissions to a user/group
  • "Revoke subproject permissions" - revoke workflowitem permissions from a user/group
note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Permission intents#

Following list describes all existing permissions. If you need more information how you can make use of a specific permission, access the documentation of the specific section via the User-Guide overview.

IntentDescription
network.listActiveshow how many peers are connected to the current network in the upper right corner (currently logged in user excluded)
global.listPermissionsthe intent has no influence on the trubudget website
global.grantPermissionassign admin permissions to a user while creating a user
global.grantAllPermissionsassign admin permissions to a user while creating a user
global.revokePermissionthe intent has no influence on the trubudget website
global.createProjectcreate a project on the overview site
global.createUsercreate a user with or without admin permissions (requires global.grantPermission)
global.disableUserdisable a user (user is not able to login nor to be assigned, permissions persist)
global.enableUserenable a user
global.createGroupcreate a group with or without admin permissions
group.addUseradd a user/group to a group
group.removeUseradd a user/group to a group
network.listaccess the nodes site
network.voteForPermissionvote for a new organization to join the network
network.approveNewOrganizationapprove a new organization to join the network
network.approveNewNodeForExistingOrganizationapprove a new node for an existing organization
project.viewSummaryshow the project on the overview site
project.viewDetailsshow the project's details by accessing the project details site
project.assignassign a user/group to the project
project.updatethe intent has no influence on the trubudget website
project.intent.listPermissionsshow which user/group has which permission on the project
project.intent.grantPermissiongrant project permissions to a user/group
project.intent.revokePermissionrevoke project permissions from a user/group
project.createSubprojectcreate a subproject
project.viewHistoryaccess the history of the project
project.closeclose the project
subproject.viewSummaryshow the subproject on the project detail site
subproject.viewDetailsshow the subproject's details by accessing the subproject details site
subproject.assignassign a user/group to the subproject
subproject.updateedit title, currency, comment or budget amount of the subproject
subproject.intent.listPermissionsshow which user/group has which permission on the subproject
subproject.intent.grantPermissiongrant subproject permissions to a user/group
subproject.intent.revokePermissionrevoke subproject permissions from a user/group
subproject.createWorkflowitemcreate a workflowitem
subproject.viewHistoryaccess the history of the subproject
subproject.closeclose the subproject
subproject.reorderWorkflowitemsreorder workflowitems that are not redacted/closed
workflowitem.viewshow the workflowitem' details on the subproject detail site
workflowitem.assignassign a user/group to the workflowitem
workflowitem.updateedit title, comment, budget or add documents to the workflowitem
workflowitem.intent.listPermissionsshow which user/group has which permission on the workflowitem
workflowitem.intent.grantPermissiongrant workflowitem permissions to a user/group
workflowitem.intent.revokePermissionrevoke workflowitem permissions from a user/group