Granting One User Access to Objects of Another User

Top  Previous  Next

This article explains how to give one AggreGate user permissions to view, modify and use an object that belongs to another user account. This object can be a Report, an Event Filter, a Device or any other system resource. See Security and Permissions for more information about the AggreGate security system.

Let's see how we can share a Temperature Monitor Widget that belongs to user admin with a user called test.

1. Detecting The Context Path of The Object to be Shared

Find object that will be shared in the System Tree of AggreGate Client. Right-click it and select Copy from the context menu to copy its context path to the clipboard:

ht_permissions_1

You can also enter this path manually when needed, later on. To see the context path of any object, hold the mouse over it for some time and check the tooltip. In our example, the Widget context path is users.admin.widgets.tmon:

ht_permissions_2

2. Changing Permissions Table

Now edit the permissions table for the user who should have access to the shared resource. Find this user's node (st_user) in the System Tree (it is located under Users  node, st_users) and right-click it. Select Edit User Properties from context menu:

ht_permissions_3

In the Permissions tab, select the first line in the table by clicking its number. Then click Add row (dte_add_row) to insert a new row at the beginning of the table. Right-click the Context Mask field for the new record and select Paste from the context menu. You can also press Ctrl-V or manually enter the context path noted at step 1. Finally, select Manager in the Permissions field:

ht_permissions_4

note_further-wt

We have put new permission record in the beginning of the table make sure that it won't be overridden by other records.

note_tip-wt

It is possible to user context masks to share a number of resources. For example, to allow access to all widgets use context mask users.admin.widgets.* instead of users.admin.widgets.tmon.

note_tip-wt

To give all newly created users permissions for certain resources, add a permission record similar to the one described above to Additional Permissions For New Users global configuration table.

3. Accessing Shared Resource

Log in as a user that should be able to access a shared resource. You should be now able to view and access this resource through the system tree. It is located under the node of its owner:

ht_permissions_5