Permissions

Description:

The purpose of a permission is to allow access to information or functionality to certain users only. Most permissions are self explaining, but if more information are required click on the intent of the permission. The intent for example for "create User" would be global.createUser. A complete list of all existing permissions can be found at the end of this document.

Global permissions

Description:

All permissions not limited to projects, subprojects or workflowitems are global permissions. Global permissions can be added to users or to groups. All global permissions are documented at the bottom of this document.

New permissions

Description:

Once a user/group is created, administrators can grant/revoke global permissions for them.

Admin permissions

Description:

A sample set of global permissions are:

• ... create projects
• ... create user/group
• ... grant/revoke global permissions to others
• ... access the nodes section

Instructions:

1. Click the button in the upper left corner to open the side-navigation-bar
2. Click the "User" menu point
3. Click the lock item in line of the user that you want to grant/revoke permissions..
4. Select the permissions that you want to grant/revoke

Project permissions

Description:

These section describes all permissions related to a project. Selecting a user or group grant them the specific permission and deselecting revoke them the specific permissions.

Instructions:

1. Click the button in the upper left corner to open the side-navigation-bar
2. Click the "Projects" menu point
3. Click the lock icon in the bottom right corner of a project to open the permissions dialog
4. After selecting/deselecting certain users or groups click on submit to open a confirmation
5. If additional permissions are required the confirmation dialog lists these.
6. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
7. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

note

• More information about a specific intent can be found in the project section.
• The user who created the project is automatically assigned to it.
• Granting assign permissions also grants view permission-permissions because it is needed in the assign process.
• More information about the confirmation dialog can be found in the confirmation section.

View permissions

Description:

• "view project in overview" : show the project on the overview site
• "view project details" : show the project's details by accessing the project details site

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Write permissions

Description:

• "Create subprojects" : create a subproject
• "Assign project to others" : assign a user/group to a project
• "Close project" : close a project

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions

Description:

• "View permissions" : show which user/group has which permission on the project
• "Grant permissions" - grant project permissions to a user/group
• "Revoke permissions" - revoke project permissions from a user/group

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Subproject permissions

Description:

These section describes all permissions related to a subproject

Instructions:

1. Click the button in the upper left corner to open the side-navigation-bar
2. Click the "Projects" menu point
3. Click the blue magnifier icon in the bottom right corner of a project
4. Click the lock icon on the right of the subproject to open the permissions dialog
5. After selecting/deselecting certain users or groups click on submit to open a confirmation
6. If additional permissions are required the confirmation dialog lists these.
7. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
8. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

note

More information about a specific action on a subproject can be found in the subproject section.

View permissions

Description:

Following intents do exist related to view permissions of a subproject:

• "view subproject overview" : show the subproject on the project detail site
• "view subproject details" : show the subproject's details by accessing the subproject details site

note

• If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)
• "view project overview" and "view project details" are also required to view a subproject

Write permissions

Description:

Following intents do exist related to write permissions of a project:

• "Create workflow items" : create a workflowitem
• "Update subproject" : edit title, currency, comment or budget amount of the subproject
• "Assign subproject" : assign a user/group to the subproject
• "Close subproject" : close the subproject
• "Reorder workflow items" : reorder workflowitems that are not redacted/closed

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions

Description:

• "View subproject permissions" : show which user/group has which permission on the subproject
• "Grant subproject permissions" - grant subproject permissions to a user/group
• "Revoke subproject permissions" - revoke subproject permissions from a user/group

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Workflow permissions

Description:

These section describes all permissions related to a workflowitem

Instructions:

1. Click the button in the upper left corner to open the side-navigation-bar
2. Click the "Projects" menu point
3. Click the blue magnifier icon in the bottom right corner of a project
4. Click the grey magnifier icon on the most right of the subproject you want to view
5. Click the lock icon on the right of the workflowitem to open the permissions dialog
6. After selecting/deselecting certain users or groups click on submit to open a confirmation
7. If additional permissions are required the confirmation dialog lists these.
8. Confirming the dialog first executes all additional actions listed if there are any, then grant/revoke the users/groups
9. If no additional permissions have to be granted the users/groups are granted/revoked all selected permissions

note

• More information about a specific intent can be found in the workflowitem section.
• If a user has any write permission but no view permission the workflowitem is shown as redacted.

View permissions

Description:

Following intents do exist related to view permissions of a subproject:

• "View workflowitem" : show the workflowitem' details on the subproject detail site

note

• If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)
• "view project overview", "view project details", "view subproject overview" and "view subproject details" are also required to view a workflowitem

Write permissions

Description:

Following intents do exist related to write permissions of a project:

• "Assign workflowitem" : assign a user/group to the workflowitem
• "Update workflowitem" : edit title, comment, budget or add documents to the workflowitem

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Admin permissions

Description:

Following permissions do exist related to a workflowitem:

• "View subproject permissions" : show which user/group has which permission on the workflowitem
• "Grant subproject permissions" - grant workflowitem permissions to a user/group
• "Revoke subproject permissions" - revoke workflowitem permissions from a user/group

note

If the grantee has not all necessary view permissions yet a dialog opens which shows all required permissions. On confirm they are granted. (see confirmation for more Details)

Permission intents

Following list describes all existing permissions. If you need more information how you can make use of a specific permission, access the documentation of the specific section via the User-Guide overview.

Intent	Description
network.listActive	show how many peers are connected to the current network in the upper right corner (currently logged in user excluded)
global.listPermissions	the intent has no influence on the trubudget website
global.grantPermission	assign admin permissions to a user while creating a user
global.grantAllPermissions	assign admin permissions to a user while creating a user
global.revokePermission	the intent has no influence on the trubudget website
global.createProject	create a project on the overview site
global.createUser	create a user with or without admin permissions (requires global.grantPermission)
global.disableUser	disable a user (user is not able to login nor to be assigned, permissions persist)
global.enableUser	enable a user
global.createGroup	create a group with or without admin permissions
group.addUser	add a user/group to a group
group.removeUser	add a user/group to a group
network.list	access the nodes site
network.voteForPermission	vote for a new organization to join the network
network.approveNewOrganization	approve a new organization to join the network
network.approveNewNodeForExistingOrganization	approve a new node for an existing organization
project.list	show the project on the overview site
project.viewDetails	show the project's details by accessing the project details site
project.assign	assign a user/group to the project
project.update	the intent has no influence on the trubudget website
project.intent.listPermissions	show which user/group has which permission on the project
project.intent.grantPermission	grant project permissions to a user/group
project.intent.revokePermission	revoke project permissions from a user/group
project.createSubproject	create a subproject
project.viewHistory	access the history of the project
project.close	close the project
subproject.list	show the subproject on the project detail site
subproject.viewDetails	show the subproject's details by accessing the subproject details site
subproject.assign	assign a user/group to the subproject
subproject.update	edit title, currency, comment or budget amount of the subproject
subproject.intent.listPermissions	show which user/group has which permission on the subproject
subproject.intent.grantPermission	grant subproject permissions to a user/group
subproject.intent.revokePermission	revoke subproject permissions from a user/group
subproject.createWorkflowitem	create a workflowitem
subproject.viewHistory	access the history of the subproject
subproject.close	close the subproject
subproject.reorderWorkflowitems	reorder workflowitems that are not redacted/closed
workflowitem.list	show the workflowitem' details on the subproject detail site
workflowitem.assign	assign a user/group to the workflowitem
workflowitem.update	edit title, comment, budget or add documents to the workflowitem
workflowitem.intent.listPermissions	show which user/group has which permission on the workflowitem
workflowitem.intent.grantPermission	grant workflowitem permissions to a user/group
workflowitem.intent.revokePermission	revoke workflowitem permissions from a user/group