Panel Name fwAccessControl/fwAccessControl_EditGroupPrivileges.pnl
Introduction

Edit access rights of a group

This panel allows to define the privileges granted to which a group. The panel is presented in Figure 1.

Figure 1: Edit group's access rights panel
The central part of the panel contains two lists: the access right list (made of domain selector and table of privilege names) on the left, and the list of the access rights that are going to be granted to a group, on the right.
Note that the access rights, which are already in the right list are "greyed out" in the left list, and cannot be selected.

To make the navigation in the right list easier, it is possible to filter on the name of the domain. One needs to unselect the Show all granted privileges box; then, the right list will only display the privileges in the domain that is selected for the left list. Such situation is presented in Figure 2:

Figure 1: Edit group's access rights panel displaying selected privileges only
In this Figure, the Show all granted privileges option is deactivated and the domain selected in the left list is MyDCS/Tracker/Pixel; note that the title frame of the right has changed to Granted privileges in MyDCS/Tracker/Pixel, and the list indicates only the privileges in this domain.


Instructions
To add access right(s) to the 'Granted access rights' list:
Select the domain and privilegs(s) (multiple selection is possible by clicking while holding the CTRL key) in the left list, then press the >. All privileges in the selected domain may be added by clicking on the >> button.
To remove access right(s) from the 'Granted access rights' list:
Select the access right(s) (multiple selection is possible by clicking while holding the CTRL key) in the right list, then press the <. All access rights may be removed by clicking on the << button.
To bring the lists to the initial state (reset the changes):
Press the Reset button
To confirm the changes:
press the OK button. This panel will be closed and the control will return to the parent panel (Edit Group panel). No changes will be applied to the group until you apply them in this parent panel!
To cancel the changes:
press the Cancel button.
Restrictions
  • The panel does not auto-update its contents when group or domains are changed (e.g. in another UI or by AC Server).
  • This panel should only be opened as a child panel of the Edit Group panel

Dollar Parameters
Name Description  
$groupName The name of the group whose access rights are edited; or empty string ("") in the create mode required
$privilegess The initial list of the access rights displayed in the Granted Access Rights: list (e.g. the "current" access rights). The dyn_string list should be casted to string variable - the panel will decode it. required

Return Values from panel
The panel should be opened using functions from the ChildPanel...Returns(... , df,ds) family.
When the panel is closed the following values may be returned in the df and ds parameters:
Variable Value(s) Description
dyn_float parameter (df[])
df[1] 1 Edit action terminated succesfully, OK button pressed
df[1] 0 Edit action cancelled, Cancel button pressed
dyn_string parameter (ds[])
ds[] if the dialog was not cancelled, it will contain the modified list on the access rights

Back to the documentation of the fwAccessControl component.

Piotr Golonka, CERN IT/CO-BE