Permissions

Permissions are a newer access control feature intended to replace capabilities and privileges. For now, they determine permissions for web access only.

Setup

Role is the user role associated with the permissions.

Resource is the {type} part of a restricted resource to be accessed.

Hashtag restricts the permission to resources which have the assigned tag. Permissions containing hashtags are only checked for updates to existing resources, not creation/deletion.

There are 4 access levels, with increasing permissiveness:

When checks are performed, the highest access level of matching permissions is used.

Dependent Resources

To simplify administration, some permissions grant access to related resources. In other words, permissions on the main resource also applies to any dependent resource, at the same access level.

1. camera
   • flow stream
2. dms
   • font
   • graphic
   • message line
   • message pattern
   • sign configuration
   • sign detail
   • sign message
   • word
3. gate arm
   • gate arm array
4. lcs
   • LCS array
   • LCS indication
   • Lane marking