Permissions
This section of the website is only accessible by Account Admin users
Permissions consists of granting access to certain parts of the data and/or display the software to groups of users by using permissions profiles.
The permissions page can be accessed from the tree by the Account admin:
The page consists of a display of the different groups and rules. Each Groups or Rules can be edited by clicking on its title. A new Group or Rule can be created by clicking on the Add New Group and Add New button.
Groups
Groups were created to be able to join a set of users under certain options for the software as well as certain permission profiles. Ultimately Groups are the main control for permissions for the software.
The change of access and rules is instantaneous between the website and the software with an internet connection. Access can be added or revoked automatically without a software restart.
Users in Group
Selection of the users in the Group:
A user can be in multiple Groups. Their access will always be controlled by its highest level rules. For example, if a user is given access to the full championship in one group and only one event in another group, he will have access to the full championship.
Permission Profiles in Group
Selection of the permission profile for the Group:
Permission Profile
Permission profiles were created to be able to combine permissions on both the data (championship, event, cars,...) and the display inside the client software (worksheets) and the API access. A Permission profile is the combination of
- Data Rules
- Client UI Rules
- API Rules
Data Rules
A new rule can be added using the Add New Data Rule Button
The different levels of rule type are:
- All - Full access
- Project - Currently not in use
- Championship - Full access to a specific Championship (all events / all cars)
- Event - Full access to a specific Event (all cars from then event)
- Car - Full access to a specific Car (all championship / all event)
- Event/Car - Access to a specific Event and a specific Car
When adding a data rule, you have to fill in the name and a short description, as well as the rule type. As an example, if you want to give a group access to a specific championship only, it would look like this:
Multiple data rules can be created to be used by a single group. The rules are controlled by the operator AND or OR.
- Use OR when you want the user to have access to all Data Rules.
- Use AND when you want the user to only have access to the data that intersect all the data rules.
Client UI Rules
The worksheet rules control access to the different worksheets inside the software. The different permissions levels for the worksheets are:
- Inherit - The rule for the specific worksheet is inherited from the parent node.
- None - The user doesn't have access to the worksheet.
- Read - The user can view the data and use all export functions but can't modify the data.
- Read/Write - The user has full access to the data.
When a worksheet inherits the permission from the parent node, it will be in italics with the colour of the correct permission. For example, by default, all nodes are inheriting from the main node and are in Read/Write permissions:
When changing a permission of a specific node, the node will turn Bold to show that it doesn't inherit from the parent node but has it's own permissions. For example, if we decide not to give access to the Setups to a certain group we would change the Setups permission to None:
The permissions tree is divided into the following sections:
- Admin
- Management
- Championship
- Event
A user who doesn't have access to the admin or management sections of the software will not have the ribbon bars available in the software:
The worksheet rules can be a combination of all types of permissions for each different worksheet. Here is an example that could be used for a tyre technician:
In this example, by default the user has read access. Then this read access is overruled to give full access to every worksheet linked to tyres so they could perform their job. Access to the setup worksheet has been removed completely.
API Rules
The API rules allows for granularity in the data accessible and modifiable from the API.
For each definition, a rule can let the user Create, Read, Update and Delete. For each definition, a user can have access to all parameters or only selected one.
Example of a rule that let a user access only the 4 cambers in read only mode:
