Authentication and Authorization - Permissions for the JOC Cockpit Web Service

Scope

• The JOC Cockpit implements Authentication and Authorization by a combination of Roles and Permissions.
• Permissions are assigned to Roles which are then assigned to User Accounts.

• The JOC Cockpit - Authentication and Authorization article provides a good introduction the Authentication and Authorization.

• This article describes the default Roles and Permissions that are delivered with the JOC Cockpit.

Matrix of Roles and Permissions

The document below shows the default Roles and Permissions delivered with the JOC Cockpit shiro.ini configuration file. System administrators can define and modify roles and permissions as required.

The purpose of each role is explained in the notes at the foot of the matrix. Of particular interest is the api_user role that is not intended for use with the JOC Cockpit interface but is intended for use with the JobScheduler Web Service from another application. More information can be found in the Authentication and Authorization - Permissions for the JobScheduler REST Web Service article.

• The list with all permissions for use with the shiro.ini file: shiro.ini-JOC-Cockpit-permission-list.txt
• Roles and Permissions Matrix as file: joc-role-operation-permission.xlsx

Examples

Allow orders to be viewed and executed

sos:products:commands:order:view, \
sos:products:commands:order:execute, \

Allow all order operations except changing and removing orders

sos:products:commands:order, \
-sos:products:commands:order:change, \
-sos:products:commands:order:remove, \

References

• Authentication and Authorization - Configuration
• Authentication and Authorization - Permissions for the JobScheduler REST Web Service