Scope
- The JOC Cockpit implements authentication and authorization by a number of permissions.
- Permissions can be assigned to roles that then are assigned to users.
More information about how this can be done is available in the Authentication and Authorization - Configuration article.
Matrix of Roles and Permissions
The document below shows the default roles and permissions delivered with the JOC Cockpit shiro.ini
configuration file. System administrators can define and modify roles and permissions as required.
The purpose of each role is explained in the notes at the foot of the matrix. Of particular interest is the api_user role that is not intended to use the JOC Cockpit interface but use the JobScheduler REST Web Services from another application. More information can be found in the Authentication and Authorization - Permissions for the JobScheduler REST Web Services article.
- Permission list for use with shiro.ini: shiro.ini-JOC-Cockpit-permission-list.txt
- Document: joc-role-operation-permission.xlsx
Complete List of Permissions
The following table shows the permissions that can be set to allow an user to access the JOC Cockpit.
Permission | Reference to Web Service Request | Description |
---|---|---|
sos:products:joc_cockpit:jobscheduler_master:view:status |
| View Master status information |
sos:products:joc_cockpit:jobscheduler_master:view:parameter | shows parameters from scheduler.xml | |
sos:products:joc_cockpit:jobscheduler_master:view:mainlog | View main log | |
sos:products:joc_cockpit:jobscheduler_master:execute:restart:terminate | Terminate and then restart | |
sos:products:joc_cockpit:jobscheduler_master:execute:restart:abort | Abort and then restart | |
sos:products:joc_cockpit:jobscheduler_master:execute:pause | Pause | |
sos:products:joc_cockpit:jobscheduler_master:execute:continue | Continue / unpause | |
sos:products:joc_cockpit:jobscheduler_master:execute:terminate | Terminate | |
sos:products:joc_cockpit:jobscheduler_master:execute:abort | Abort | |
sos:products:joc_cockpit:jobscheduler_master:manage_categories | Manage log categories | |
sos:products:joc_cockpit:jobscheduler_master_cluster:view:status | View Cluster status information | |
sos:products:joc_cockpit:jobscheduler_master_cluster:execute:terminate_fail_safe | /jobscheduler/cluster/terminate_failsafe | Failsafe termination of Cluster |
sos:products:joc_cockpit:jobscheduler_master_cluster:execute:restart | Restart Cluster | |
sos:products:joc_cockpit:jobscheduler_master_cluster:execute:terminate | /jobscheduler/cluster/terminate | Terminate Cluster |
sos:products:joc_cockpit:jobscheduler_universal_agent:view:status | /jobscheduler/agents | View status of Agent |
sos:products:joc_cockpit:jobscheduler_universal_agent:execute:restart:abort | Abort Agent then restart | |
sos:products:joc_cockpit:jobscheduler_universal_agent:execute:restart:terminate | Terminate Agent then restart | |
sos:products:joc_cockpit:jobscheduler_universal_agent:execute:abort | Abort Agent | |
sos:products:joc_cockpit:jobscheduler_universal_agent:execute:terminate | Terminate Agent | |
sos:products:joc_cockpit:daily_plan:view:status | View status of Daily Plan | |
sos:products:joc_cockpit:history:view | View History | |
sos:products:joc_cockpit:order:view:status | View Order status | |
sos:products:joc_cockpit:order:view:configuration | View Order configuration | |
sos:products:joc_cockpit:order:view:order_log | View Order Log | |
sos:products:joc_cockpit:order:change:start_and_end_node | Change Order start & end nodes | |
sos:products:joc_cockpit:order:change:time_for_adhoc_orders | Change time for adhoc Orders | |
sos:products:joc_cockpit:order:change:parameter | Change Order parameters | |
sos:products:joc_cockpit:order:change:run_time | Change Order runtime | |
sos:products:joc_cockpit:order:change:state | Change Order state | |
sos:products:joc_cockpit:order:change:hot_folder | Change Hot Folder | |
sos:products:joc_cockpit:order:execute:start | Start Order | |
sos:products:joc_cockpit:order:execute:update | Update Order | |
sos:products:joc_cockpit:order:execute:suspend | Suspend Order | |
sos:products:joc_cockpit:order:execute:resume | Resume Order | |
sos:products:joc_cockpit:order:execute:reset | Reset Order | |
sos:products:joc_cockpit:order:execute:remove_setback | Remove Order Setback | |
sos:products:joc_cockpit:order:delete:permanent | Delete Order permanently | |
sos:products:joc_cockpit:order:delete:temporary | Delete Order temporarily | |
sos:products:joc_cockpit:job_chain:view:configuration | View Job Chain configuration | |
sos:products:joc_cockpit:job_chain:view:history | View Job Chain History | |
sos:products:joc_cockpit:job_chain:view:status | View Job Chain status | |
sos:products:joc_cockpit:job_chain:execute:stop | Stop Job Chain execution | |
sos:products:joc_cockpit:job_chain:execute:unstop | Restart Job Chain execution | |
sos:products:joc_cockpit:job_chain:execute:add_order | Add Order to Job Chain | |
sos:products:joc_cockpit:job_chain:execute:skip_jobchain_node | Skip Job Chain node | |
sos:products:joc_cockpit:job_chain:execute:process_jobchain_node | Process Job Chain node | |
sos:products:joc_cockpit:job_chain:execute:stop_jobchain_node | Stop procession of Job Chain node | |
sos:products:joc_cockpit:job_chain:change:hot_folder | Modify Job Chain | |
sos:products:joc_cockpit:job:view:status | View Job status | |
sos:products:joc_cockpit:job:view:task_log | View Job task log | |
sos:products:joc_cockpit:job:view:configuration | View Job configuration | |
sos:products:joc_cockpit:job:view:history | View Job History | |
sos:products:joc_cockpit:job:change:run_time | Change Job Runtime | |
sos:products:joc_cockpit:job:change:hot_folder | Change Job hot folder | |
sos:products:joc_cockpit:job:execute:start | Start Job | |
sos:products:joc_cockpit:job:execute:stop | Stop Job | |
sos:products:joc_cockpit:job:execute:unstop | Unstop Job | |
sos:products:joc_cockpit:job:execute:terminate | Terminate Job | |
sos:products:joc_cockpit:job:execute:kill | Kill Job | |
sos:products:joc_cockpit:job:execute:end_all_tasks | End all tasks | |
sos:products:joc_cockpit:job:execute:suspend_all_tasks | Suspend all tasks | |
sos:products:joc_cockpit:job:execute:continue_all_tasks | Continue all tasks | |
sos:products:joc_cockpit:process_class:view:status | View status of Process Class | |
sos:products:joc_cockpit:process_class:view:configuration | View configuration of Process Class | |
sos:products:joc_cockpit:process_class:modify_hot_folder | Modify Process Class | |
sos:products:joc_cockpit:schedule:view:configuration | View Schedule configuration | |
sos:products:joc_cockpit:schedule:view:status | View Schedule status | |
sos:products:joc_cockpit:schedule:add_substitute | Add substitute Schedule | |
sos:products:joc_cockpit:schedule:modify_hot_folder | Modify Schedule
| |
sos:products:joc_cockpit:schedule:edit:remove | Remove Schedule | |
sos:products:joc_cockpit:lock:view:configuration | View Lock configuration | |
sos:products:joc_cockpit:lock:view:status | View Lock status | |
sos:products:joc_cockpit:lock:modify_hot_folder | Modify Lock | |
sos:products:joc_cockpit:lock:edit:change | Change Lock | |
sos:products:joc_cockpit:lock:remove | Remove Lock | |
sos:products:joc_cockpit:event:view:statu s | View Event status | |
sos:products:joc_cockpit:event:delete | Delete Event | |
sos:products:joc_cockpit:event_action:view:status" | View Event Action status | |
sos:products:joc_cockpit:event_action:create_event_manually | Manually create an Event Action | |
sos:products:joc_cockpit:holiday_calendar:view:status | View status of Holiday Calender | |
sos:products:joc_cockpit:maintenance_window:view:status | View status of Maintenance Window | |
sos:products:joc_cockpit:maintenance_window:enable_disable_maintenance_window | Enable or disable Maintenance Window |
Examples
Allow orders to be viewed and executed
Allow all order operations except changing and removing orders
References
- Authentication and Authorization - Configuration
- Authentication and Authorization - Permissions for the JobScheduler REST Web Services