Permission Matrix

Tables

dashboard

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
dashboard	x	x	x
- tiles: me		x	x
- tiles: me/summary		x	x
- tiles: me/tasks		x	x
- tiles: me/requests		x	x
- tiles: me/history		x	x
- tiles: shopping-cart			x
- tiles: orders			x
- tiles: users			x
- tiles: accounts			x
- tiles: roles			x
- tiles: tools					ui.features.tools: true
- tiles: reports					ui.features.reports: true
- view child objects		x	x	can view child objects on dashboard

me

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
me	x	x	x
- nav entry: me/summary		x	x	can view details tab
- nav entry: me/tasks		x	x
- nav entry: me/requests		x	x
- nav entry: me/history		x	x
- nav entry: me/process-history		x	x
- nav entry: actions		x	x
- panel: main	x	x	x	configurable via panels config	users/acoounts.panels
- panel: [other]		x	x	configurable via panels config	users/acoounts.panels
- view roles		x	x	can view roles
- view inherited roles			x	can view inherited roles
- view resources			x	can view resources	users/acoounts.hideResourcesPanel
- view groups			x	can view groups

users

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
users		x	x
- nav entry: users/summary		x	x	can view details tab
- nav entry: users/tasks			x
- nav entry: users/requests			x
- nav entry: users/history			x
- nav entry: users/process-history			x
- nav entry: actions		x	x
- panel: main		x	x	configurable via panels config	users.panels
- panel: [other]			x	configurable via panels config	users.panels
- view roles			x	can view roles
- assign and revoke roles roles			x	can assign and revoke roles		is the viewer allowed to request role assignments and revokations for this user
- view inherited roles			x	can view inherited roles
- view resources			x	can view resources	users.hideResourcesPanel
- view groups			x	can view groups

accounts

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
accounts		x	x
- nav entry: accounts/tasks			x
- nav entry: accounts/requests			x
- nav entry: accounts/process-history			x
- nav entry: actions		x	x
- panel: main		x	x	configurable via panels config	acoounts.panels
- panel: [other]			x	configurable via panels config	acoounts.panels
- view roles			x	can view roles
- assign and revoke roles roles			x	can assign and revoke roles		is the viewer allowed to request role assignments and revokations or his account
- view inherited roles			x	can view inherited roles
- view resources			x	can view resources	acoounts.hideResourcesPanel
- view groups			x	can view groups

roles

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
roles			x
- nav entry: roles/actions			x
- edit attributes			x	can edit attributes
- is revokable			x	is revokable		is the viewer allowed to request revokation of this role
- assign and revoke users			x	can assign and revoke users		is the viewer allowed to request users assignments and revokations for this role

requets

Permission	Guest	User	Admin	rules.js	local.yaml	descrption
start	x	x	x	can start
trigger action		x	x	can trigger action		owner is the user/role for whom to trigger the action