Granting Permissions
You can grant permissions to the following database objects:
•
Repositories
•
Branches
•
Snapshots
•
Models
•
Files
•
Tags
There is also a set of global permissions for the database itself — see Granting Database Permissions.
You can change the permissions for a database object if you own the object, or if you are authenticated as an administrator.
Click Permissions () in the Permissions section of the Database toolbar. The Permissions dialog is opened for the current selection in The Model Manager Window, The Databases Window, or The Maintenance Window (depending on which window has focus).
The Database field shows the label of the database that the object belongs to, the Name field shows the name of the object, and the Current owner field shows the username of the user that owns the object.
1
In the Permissions list:
a
Select None to not set any permission requirements on the database object. See also Permission Levels to learn how an object may still be protected by a parent object in The Databases Tree.
b
Select Public, Protected, or Private to set one of the Predefined Permission Templates.
c
Select one of the previously created permission templates — see Creating your own Permission Templates.
d
Select Custom to set up Custom Permissions for the database object.
2
Click OK to save the permissions for the database object.
Custom Permissions
Selecting Custom in the Permissions field enables you to customize the permissions for a database object. Granted permissions and their grantees — that is, users or groups — are shown in a table with the following columns:
•
The type column — the type of the grantee represented by an icon.
•
The Name column — the name of the grantee.
•
The Permissions column — all granted permissions.
Click the Add button to add another user or group with a set of permissions.
1
In the opened Add dialog, write the names or display names of users and groups in the search field. Click Search.
2
Select a user or group in the table.
3
Under Permissions, select the permissions to grant the user or group. Use Select all to grant all permissions.
4
Click OK to add the granted permissions and the grantee to the table.
Select a row in the table and click the Edit button to modify already granted permissions. In the opened Edit dialog, select and clear the Permissions checkboxes accordingly.
Click the Remove button to remove a grantee from the table.
The set of grantees and corresponding granted permissions is known as an access-control list (ACL).
Everyone and Owner
You can grant permissions to a special group, Everyone, that automatically includes all users. Use this when you, for example, want to grant a subset of permissions to all users but restrict another subset of permissions to only some users and groups.
The user that is the owner of a database object can be implicitly granted permissions by adding an Owner from the Add dialog. Use this when you, for example, want to make sure that the permissions are transferred to the correct user when ownership is changed — see Transfer Ownership.
Granting Database Permissions
You can grant permissions for actions that target the database itself. You can think of this as delegating a few administrative tasks that would otherwise be restricted to administrators. Only administrators can grant database permissions.
Right-click a database node in The Databases Tree and select Database Permissions () to open the Database Permissions dialog. The Database field shows the label of the database.
You add, edit, and remove granted permissions and their grantees in a table in the same way as when selecting Custom in the Permissions field for a database object, except that Everyone and Owner are not available — see Custom Permissions.