//Cloudogu EcoSystem Docs

Permissions

For a user to be able to read and edit data in the Baseline-Dogu, he or she must have the appropriate permissions. This article describes which user groups there are, how they differ, and how they can be configured.

User groups

There are the following three permission groups for the Baseline Dogu:

  • Baseline reader
  • Baseline editor
  • Baseline admin

Permissions are assigned via group assignments in User Management. For a user to be able to open the Baseline Dogu in general, he must be in at least one of the configured groups.

The individual permission groups build on each other. This means:

  • Baseline editors and baseline admins have the permissions of the baseline reader.
  • Baseline admins have the permission of the baseline editor.

Baseline reader

The Baseline reader - as the name suggests - has the right to read the information in the Baseline Dogu. He is not allowed to perform writing actions that change data.

If no group is configured to read the dogu, any user existing in the CAS may open and read the baseline dogu.

Baseline editor

The baseline editor may perform write, data-modifying actions. Among other things, the baseline editor can open a baseline, fix a baseline, and collect artifacts again.

However, the baseline editor may not reopen a baseline and may not make changes to the configuration.

The following actions may be performed by the baseline editor:

  • Open Baseline
  • Fix baseline
  • Re-collect artifacts of a baseline

Baseline admin

The baseline admin is allowed to perform additional actions compared to the baseline editor. These include reopening a baseline and configuring the baseline dogus.

The baseline admin is allowed to perform the following actions:

  • All actions of the baseline editor.
  • Reopen a baseline
  • Changing the projects configuration