DOCS

Object Permissions

Object permissions are set for individual object instances for non-root objects. When you set object permissions on a root object, all its dependent objects inherit the same permission settings.

To allow users with a specific user profile to run only some of the queries

Deny read permission on each Query object that you do not want the users to be able to run.

Deny read permission on the becubic::administration::query::Query object type (see Setting Permissions on Repository Objects), and allow read permission on the queries that you want the users to be able to run.

ASG recommends using this method if there are many queries that you do not want certain users to run.

Object permissions on sets apply only to the Set objects and not to their contents.

Setting Object Permissions

To set permissions for an object instance

Display the objects for which you want to set permissions in the right frame:

You do so either by running a query, by performing a quick search, or by displaying all object instances in Type Browser mode (see the ASG-becubic Web Client User’s Guide or the ASG-becubic User’s Guide if you are working with the becubic Eclipse client).

Right-click the object for which you want to set permissions.
Select Object Permissions on the shortcut menu. The Permissions dialog for the selected object opens:

The Available roles list displays only the roles for which permissions already have been set (that is, allowed or denied).

On the Permissions dialog, click Add. The Choose Role window opens:

Click the name of the role that you want to add to the Available roles list. If you are working with the becubic Eclipse client, click OK to validate your choice.
You are returned to the Permissions dialog, where the selected role has been added to the Available roles list.
Optional. Specify or change the owner of the current object. See Defining the Owner of an Object.
Still on the Permissions dialog, click the name of the role for which you want to set permissions.
Select or clear each check box, depending on whether you want to allow or deny action on the selected object instance. See Action Types for an Object Instance for a description of each action.
Click Save (or OK if you are working with the becubic Eclipse client).

Action Types for an Object Instance

Action Type	Description
Read	Allows or denies displaying the selected object instance.
Update	Allows or denies updating the selected object instance.
Delete	Allows or denies deleting the selected object instance.
Access	Allows or denies access to the selected object instance, but not to the attributes or references. Only the ID, display name and type can be accessed.
Source	Allows or denies use of the View Source function for the selected object instance.

If neither the Allow nor the Deny check box is selected for a role, any users associated with this role can inherit the corresponding permission from another role.
Permission settings also have an impact on query results. For example, if you only have access permission to specific objects, you will not see any other objects the query might retrieve.

Defining the Owner of an Object

Defining a user as the owner of one or more objects is optional and applies to individual objects, not to object types. If an object does not have an owner defined, then the Owner role will not have control of this object.

To define or change an owner

Display the object(s) whose owner you want to define or change.
You do so by running a query, by performing a quick search, or by displaying all object instances in Type Browser mode (see the ASG-becubic Web Client User’s Guide or the ASG-becubic User’s Guide if you are working with the becubic Eclipse client).
Select the object(s), and right-click.
Select Object Permissions on the shortcut menu. The Permissions dialog for the selected object(s) opens.
Click the ellipsis button [...], and choose a user.
Click Save (or OK if you are working with the becubic Eclipse client).

To clear the current owner and leave the selected object(s) without an owner

Follow step 1 through step 3 to define or change an owner.
Click No owner.
Click Save (or OK if you are working with the becubic Eclipse client).