Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Include Page
_DcmArchitectureBetaLabel
_DcmArchitectureBetaLabel

Instead of using the basic authentication mechanism of the maintenance app, it is also possible to setup authentication and authorization with OAuth.

...

View file
namedcm-maintenance-app-realm-export.json
pageOAuth configuration
spaceBQ15
height250


Maintenance app:

...

The following roles are known by the application and can be assigned to a user:

RolePermission
guestview-data
maintainerview-sensitive-data
owner

view-sensitive-data

mutate-data

auditor

No privileges mapped. Only audit functionality is available

The only thing to configure is one (or more) of the roles described above. The roles are translated into permission by the maintenance application, they determine what a user can do in the application.

The following permissions are known:

PermissionDescription
view-data

allows read-only access to non-sensitive data

view-sensitive-data

allows read-only access to all data including:

    • Message.Body
    • Case.lockedBy
    • CaseProfile
    • Task.executedBy
mutate-data

allows executing actions that mutate data