Settings for roles
Roles are a UNICOM Intelligence Interviewer - Server Admin tool for specifying permissions and other security settings for groups of users who have the same set of requirements. If you have set up UNICOM Intelligence Interviewer - Server Admin security correctly, all your users should be members of at least one role. The Role section of SampleMgtConfig.GUI.xml can be used to set access based on a specific role.
The Role section has the same structure as the Default section, except that it starts with a <Role> tag that names the role whose permissions it defines. The following example gives members of the SMManager role unlimited access to all sample management servers. This is the built-in default for members of the DPMAdmins role.
<Role name="SMManager">
<Server name="*">
</Server>
</Role>
Note You must type the role name in exactly the same case as it appears in the Roles table in the mrUserData database.
Here is an example that shows how to use the Default and Role sections together to provide comprehensive security for all your sample management databases and tables.
<SampleManagementGUI>
<Role name="SMManager">
<Server name="*">
</Server>
</Role>
<Role name="CustA">
<Server name="Red">
<Database name="CustA_Sample">
</Database>
<Database name="Participants">
</Database>
</Server>
</Role>
<Role name="CustB">
<Server name="Red">
<Database name="CustB_Sample">
</Database>
<Database name="Participants">
</Database>
</Server>
</Role>
<Default>
<Server name="Blue">
<Database name="Participants" >
</Database>
</Server>
</Default>
</SampleManagementGUI>
This example implements the following security policy:
▪All members of the SMManager role can access all sample management servers and, by implication, all databases on those servers.
▪Members of the CustA role can access only the CustASample and Participants databases on the Red server.
▪Members of the CustB role can access only the CustBSample and Participants databases on the Red server.
▪Users who are not members of the DPMAdmins, CustA or CustB roles have access to the Participants database on the Blue server and nothing else.
See also