Changes between Version 16 and Version 17 of Internal/Rbac/OrbitRbacDesign/ResourcesRoles

Timestamp:

Oct 5, 2006, 9:20:40 PM (18 years ago)

Author:

anonymous

Comment:

—

Internal/Rbac/OrbitRbacDesign/ResourcesRoles

@@ -31 +31 @@
  1. ORBIT Administrator:  browse, add, modify and delete ORBIT users; browse, add, modify and delete ORBIT projects;  browse, add, modify and delete Project Leaders and Project Administrators; set logging options and audit ORBIT logs; can delegate to Designated ORBIT Administrator; cardinality = 1.
  1. Designated ORBIT Administrator:  same privileges as ORBIT Administrator except cannot delegate role; cardinality = 1.
+ 1. Principal Investigator:  can modify or delete results of any of the project's experiments; has complete access to any project-specific resources;  can delegate to Designated Principal Investigator;  can appoint Project Administrator;  inherits Project Administrator role, i.e,, can perform all Project Administrator functions;  cardinality = 1 per project.
+ 1. Designated Principal Investigator:  same privileges as Project Leader except cannot delegate;  cardinality = 1 per project.
+ 1. Project Administrator:  browse selected fields of and add ORBIT users;  add and delete users to and from roles in his or her project;  can delegate role to Designated Project Administrator; cardinality = 1 per project.
+ 1. Designated Project Administrator:  same privileges as Project Administrator except cannot delegate; cardinality = 1 per project.
  1. Experimenter:  all privileges to run an ORBIT experiment and analyze results, but not modify or delete results.
  1. Analyst:  can only analyze results of an ORBIT experiment, not run one.
- 1. Project Administrator:  browse selected fields of and add ORBIT users;  add and delete users to and from roles in his or her project;  can delegate role to Designated Project Administrator; cardinality = 1 per project.
- 1. Designated Project Administrator:  same privileges as Project Administrator except cannot delegate; cardinality = 1 per project.
- 1. Project Leader:  can modify or delete results of any of the project's experiments; complete access to any project-specific resources;  can delegate to Designated Project Leader; cardinality = 1 per project.
- 1. Designated Project Leader:  same privileges as Project Leader except cannot delegate;  cardinality = 1 per project.
  1. Developer:  not sure what the scope of a developer's privileges should be.  Does a developer become and Experimenter to run a test?