Changes for page Permissions Configuration

Last modified by colinw on 2021/09/10 23:34

From 14.1 to 15.1

From version 15.1

edited by colinw
on 2014/11/11 16:50

Change comment: There is no comment for this version

To version 16.3

edited by colinw
on 2021/09/10 23:34

Change comment: Update document after refactoring.

Raw
Rendered

Summary

Page properties (2 modified, 0 added, 0 removed)

Details

Page properties

Parent

...	...	@@ -1,0 +1,1 @@
	1	+iSymphony Developer Documentation.REST API Documentation.Configuration API.WebHome

Content

@@ -35,17 +35,31 @@
  === **Exceptions** ===
--The heart of the permission system lies in the exceptions to the rules. This allows for powerful combinations to be achieved. Generally, the objects defined by their UUIDs in the exceptions field will be allowed to perform an action if the allowed flag is false, and prevented from performing that action if the allowed flag is true. That is, they will follow the opposite of the general policy for that definition. There are a few special cases.
++The heart of the permission system lies in the exceptions to the rules. This allows for powerful combinations to be achieved. Generally, the objects defined by their UUIDs in the exceptions field will be allowed to perform an action if the allowed flag is false, and prevented from performing that action if the allowed flag is true. That is, they will follow the opposite of the general policy for that definition.
++=== Special Values ===
++
++There are a few special predefined values that are used by the permission system. They are:
++
++* All Users Group: The all users group is hard-coded into iSymphony to contain all users. You can use this to set global permissions on the clients. The UUID for the 'All Users' group is 21d97061-ff6a-11e1-a21f-0800200c9a66.
++* 'Owned' permission target: In many cases, an administrator may want to defined that users only have access to their "own" objects: their user, their extensions, their phone numbers, etc. In this case, setting the permission to 'Deny', with the special exception df41edec-2707-46eb-8b8f-146b01d9b29e will only give users access to their own objects.
++
  = Root Resource Paths =
  {{code}}
  communication_manager/api/resource/core/{core_server_id}/permissions
--communication_manager/api/resource/core/getBySlug/{core_server_slug}/permissions
  {{/code}}
  = JSON Representation =
++{{code title="Core Server Permissions Enabled" language="js"}}
++{
++    "permissionsEnabled": false
++}
++{{/code}}
++
++Note: the above object is only used to enable or disable permissions. See the page on the core server configuration itself to query the status of the permissions.
++
  {{code title="PermissionConfig" language="js"}}
      {
          "key": "cellPhoneOriginateTo",
@@ -106,14 +106,35 @@
  |=(% colspan="2" %)(% colspan="2" %)
  (((
--{{{communication_manager/api/resource/core/{core_server_id}/permissions/userGroup/{user_group_id}}}}
--
--{{{communication_manager/api/resource/core/getBySlug/{core_server_slug}/permissions/userGroup/{user_group_id}}}}
++communication_manager/api/resource/core/{core_server_id}/permissions
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
--(((
++|=(((
  **Description**
  )))|(((
++Specifies whether permissions should be enabled or disabled for the entire core server. When disabled, no permission checks will be performed, so the rest of the settings specified in the permissions system will have no effect. Note that you must have a supported license installed to enable permissions.
++
++**Parameters**:
++
++* core_server_id: The UUID of the core server
++
++**Errors**:
++
++* 500 'Your license does not support permissions.': Returned if you do not have a license installed, or if your license does not support permissions.
++)))
++|=(((
++PUT
++)))|(((
++Sets whether permissions are enabled or disabled globally on the core server.
++)))
++|=(% colspan="2" %)(% colspan="2" %)
++(((
++{{{communication_manager/api/resource/core/{core_server_id}/permissions/userGroup/{user_group_id}}}}
++)))
++|=(% colspan="1" %)(% colspan="1" %)
++(((
++Description
++)))|(% colspan="1" %)(% colspan="1" %)
++(((
  Retrieves permissions for the user group identified by the {user_group_id} path parameter.
  **Parameters**:
@@ -126,21 +126,18 @@
  * 404 'No user group exists with that id.': Returned if the provided user_group_id does not match a user group in the system.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% colspan="1" %)(% colspan="1" %)
  (((
--**GET**
--)))|(((
++GET
++)))|(% colspan="1" %)(% colspan="1" %)
++(((
  Retrieves all permissions defined for the user group.
  )))
--
  |=(% colspan="2" %)(% colspan="2" %)
  (((
  {{{communication_manager/api/resource/core/{core_server_id}/permissions/userGroup/{user_group_id}/{key}}}}
--
--{{{communication_manager/api/resource/core/getBySlug/{core_server_slug}/permissions/userGroup/{user_group_id}/{key}}}}
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
--(((
++|=(((
  **Description**
  )))|(((
  Retrieves or updates a specific permission for a user group.
@@ -159,10 +159,11 @@
  * 404 'No user group exists with that id.': Returned if the provided user_group_id does not match a user group in the system.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% colspan="1" %)(% colspan="1" %)
  (((
  **GET**
--)))|(((
++)))|(% colspan="1" %)(% colspan="1" %)
++(((
  Retrieves a specific permission for the user group.
  **Errors**:
@@ -169,10 +169,11 @@
  * 404 'No permission with that key is defined for that user group.': Returned if there is no permission defined for the user group with that permission key.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% colspan="1" %)(% colspan="1" %)
  (((
  **PUT**
--)))|(((
++)))|(% colspan="1" %)(% colspan="1" %)
++(((
  Sets the permission definition for the user group with the specified key. The key defined in the permission definition body must match the key used in the URL.
  **Errors**:
@@ -180,7 +180,7 @@
  * 412 'You must specify a key for a permission.': Returned if the permission definition that is supplied does not have a key defined.
  * 412 'You cannot specify an inherited permission. Remove the permission instead.': Returned if the inherited flag of the permission definition is set to true.
  )))
--|(% class="highlight-grey" colspan="1" data-highlight-colour="grey" %)(% class="highlight-grey" colspan="1" data-highlight-colour="grey" %)
++|=(% colspan="1" %)(% colspan="1" %)
  (((
  **DELETE**
  )))|(% colspan="1" %)(% colspan="1" %)
@@ -191,14 +191,11 @@
  * 404 'No permission with that key is defined for that user group.': Returned if there is no permission defined for the user group with that permission key.
  )))
--
  |=(% colspan="2" %)(% colspan="2" %)
  (((
  {{{communication_manager/api/resource/core/{core_server_id}/permissions/user/{user_id}}}}
--
--{{{communication_manager/api/resource/core/getBySlug/{core_server_slug}/permissions/user/{user_id}}}}
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **Description**
  )))|(((
@@ -214,20 +214,17 @@
  * 404 'No user exists with that id.': Returned if the provided user_id does not match a user in the system.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **GET**
  )))|(((
  Retrieves all permissions defined for the user.
  )))
--
  |=(% colspan="2" %)(% colspan="2" %)
  (((
  {{{communication_manager/api/resource/core/{core_server_id}/permissions/user/{user_id}/{key}}}}
--
--{{{communication_manager/api/resource/core/getBySlug/{core_server_slug}/permissions/user/{user_id}/{key}}}}
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **Description**
  )))|(((
@@ -247,7 +247,7 @@
  * 404 'No user exists with that id.': Returned if the provided user_id does not match a user in the system.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **GET**
  )))|(((
@@ -257,7 +257,7 @@
  * 404 'No permission with that key is defined for that user.': Returned if there is no permission defined for the user with that permission key.
  )))
--|(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **PUT**
  )))|(((
@@ -268,11 +268,10 @@
  * 412 'You must specify a key for a permission.': Returned if the permission definition that is supplied does not have a key defined.
  * 412 'You cannot specify an inherited permission. Remove the permission instead.': Returned if the inherited flag of the permission definition is set to true.
  )))
--|(% class="highlight-grey" colspan="1" data-highlight-colour="grey" %)(% class="highlight-grey" colspan="1" data-highlight-colour="grey" %)
++|=(% class="highlight-grey" data-highlight-colour="grey" %)(% class="highlight-grey" data-highlight-colour="grey" %)
  (((
  **DELETE**
--)))|(% colspan="1" %)(% colspan="1" %)
--(((
++)))|(((
  Clears the specific permission definition for the user.
  **Errors**:
@@ -280,30 +280,38 @@
  * 404 'No permission with that key is defined for that user.': Returned if there is no permission defined for the user with that permission key.
  )))
++
++
  = Curl Examples =
--=== Get ===
++{{info}}
++The server ID in the below examples is 9280cd1c-4ad7-4ed9-ae8a-0648b0b45cf7. You will need to change this to the appropriate ID for your installation, as well as change other IDs.
++{{/info}}
++=== (% style="color: rgb(0,0,0);" %)Get all defined permissions for the 'All Users' group(%%) ===
++
  {{code language="bash"}}
--
++curl --user manager:manag3rpa55word -i -H "Content-Type: application/json" https://127.0.0.1:55050/communication_manager/api/resource/core/9280cd1c-4ad7-4ed9-ae8a-0648b0b45cf7/permissions/userGroup/21d97061-ff6a-11e1-a21f-0800200c9a66
  {{/code}}
--=== Update ===
++=== Get all defined permissions for a specific user ===
--{{code language="bash"}}
--
++{{code}}
++curl --user manager:manag3rpa55word -i -H "Content-Type: application/json" https://127.0.0.1:55050/communication_manager/api/resource/core/9280cd1c-4ad7-4ed9-ae8a-0648b0b45cf7/permissions/user/8a026a93-3201-4554-b993-32576a3b8ea5
  {{/code}}
--=== Add ===
++=== (% style="color: rgb(0,0,0);" %)Deny the 'passwordChange' permission for the above user(%%) ===
  {{code language="bash"}}
--
++curl --user manager:manag3rpa55word -i -H "Content-Type: application/json" -X PUT -d '{"key":"passwordChange","allowed":"false"}' https://127.0.0.1:55050/communication_manager/api/resource/core/9280cd1c-4ad7-4ed9-ae8a-0648b0b45cf7/permissions/user/8a026a93-3201-4554-b993-32576a3b8ea5/passwordChange
  {{/code}}
--=== Delete ===
++=== Remove the 'passwordChange' permission for the above user ===
++Note: this will not prevent the user from changing their password. It will cause the user to inherit the permission of any user groups they are a part of.
++
  {{code language="bash"}}
--
++curl --user manager:manag3rpa55word -i -H "Content-Type: application/json" -X DELETE https://127.0.0.1:55050/communication_manager/api/resource/core/9280cd1c-4ad7-4ed9-ae8a-0648b0b45cf7/permissions/user/8a026a93-3201-4554-b993-32576a3b8ea5/passwordChange
  {{/code}}
  {{/layout-cell}}
  {{/layout-section}}

Changes for page Permissions Configuration

Summary

Details

Search

Navigation