IRIS

Intelligent Roadway Information System


Permissions

A permission record grants one role access to a resource.

API Resources 🕵️
  • iris/api/permission
  • iris/api/permission/{name}
  • iris/api/access
Access Primary
👁️ View name, role, base_resource
🔧 Configure hashtag, access_level

Setup

Role is the user role associated with the permission.

Base resource is the resource to grant permission for the role.

Hashtag restricts the permission to resources which have the assigned tag. Permissions containing hashtags are only checked for updates to existing resources, not creation/deletion.

There are 4 access levels, with increasing permissiveness:

Level Access Permissions
1 👁️ View Monitor / read
2 👉 Operate + Control
3 💡 Manage + Policies, scheduling
4 🔧 Configure + Create, update, delete

When checks are performed, the highest access level of matching permissions is used.

Base Resources

To simplify administration, some permissions grant access to related resources. In other words, permissions on the base resource also applies to any dependent resource, at the same access level.

Base Resource Dependent Resources
action plan day matcher, day plan, device action, plan phase, time action
alert config alert info, alert message
beacon
camera camera preset, camera template, cam vid src ord, encoder stream, encoder type, vid source template
controller alarm, comm link, controller io, gps, modem
detector r_node, road, road affix, station
dms font, glyph, graphic, message line, message pattern, sign configuration, sign detail, sign message, word
gate arm gate arm array
incident inc_advice, inc_descriptor, inc_locator, incident_detail
lcs lane marking, lane use multi, lcs array, lcs indication
parking area
permission connection, domain, role, user id
ramp meter
system attribute cabinet style, comm config, event config, map extent, rpt conduit
toll zone tag reader
video monitor flow stream, monitor style, play list
weather sensor

Associated Resources

Some resources contain an associated resource_n, linking them to another resource. These include: