Granting Permissions
You can grant permissions to the following database objects:
•
Repositories
•
Branches
•
Snapshots
•
Models
•
Files
•
Tags
There is also a set of global permissions for the database itself — see Granting Database Permissions.
You can change the permissions for a database object if you own the object, or if you are authenticated as a root administrator.
Click Permissions () in the Permissions section of the Database toolbar. The Permissions dialog box is opened for the current selection in The Databases Window, The Model Manager Window, or The Maintenance Window (depending on which window is focused).
The Database field shows the label of the database that the object belongs to, the Name field shows the name of the object, and the Current owner field shows the username of the user that owns the object.
1
In the Permissions list:
a
Select None to not set any permission requirements on the database object. See also Permission Levels to learn how an object may still be protected by a parent object in The Databases Tree.
b
Select Public, Protected, or Private to set one of the Predefined Permission Templates.
c
Select one of the previously created permission templates — see Creating your own Permission Templates.
d
Select Custom to set up Custom Permissions for the database object.
2
Click OK to save the permissions for the database object.
Custom Permissions
Selecting Custom in the Permissions field enables you to customize the permissions for a database object. Granted permissions and their grantees — that is, users or groups — are shown in a table with the following columns:
•
The type column — the type of the grantee represented by an icon.
•
The Name column — the name of the grantee.
•
The Permissions column — all granted permissions.
Click the Add button to add another user or group with a set of permissions.
1
In the opened Add dialog box, write the names or display names of users and groups in the search field. Click Search.
2
Select a user or group in the table.
3
Under Permissions, select the permissions to grant the user or group. Use Select all to grant all permissions.
4
Click OK to add the granted permissions and the grantee to the table.
Select a row in the table and click the Edit button to modify already granted permissions. In the opened Edit dialog box, select and clear the Permissions check boxes accordingly.
Click the Remove button to remove a grantee from the table.
The set of grantees and corresponding granted permissions is known as an access-control list (ACL).
Everyone and Owner
You can grant permissions to a special group, Everyone, that automatically includes all users. Use this when you, for example, want to grant a subset of permissions to all users but restrict another subset of permissions to only some users and groups.
The user that is the owner of a database object can be implicitly granted permissions by adding an Owner from the Add dialog box. Use this when you, for example, want to make sure that the permissions are transferred to the correct user when ownership is changed — see Transfer Ownership.
Granting Database Permissions
You can grant permissions for actions that target the database itself. You can think of this as delegating a few administrative tasks that would otherwise be restricted to root administrators. Only root administrators can grant database permissions.
Right-click a database node in The Databases Tree and select Database Permissions () to open the Database Permissions dialog box. The Database field shows the label of the database.
You add, edit, and remove granted permissions and their grantees in a table in the same way as when selecting Custom in the Permissions field for a database object, except that Everyone and Owner are not available — see Custom Permissions.