Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UI: Make permissions configurable #1206

Closed
shral opened this issue Jan 31, 2018 · 1 comment
Closed

UI: Make permissions configurable #1206

shral opened this issue Jan 31, 2018 · 1 comment
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@shral
Copy link
Member

shral commented Jan 31, 2018

Initialize the configuration of UI permissions in LDAP by

$ ldapadd -xW -Dcn=admin,dc=dcm4che,dc=org -f $DCM4CHEE_ARC/ldap/init-ui-config.ldif 
$ ldapadd -xW -Dcn=admin,dc=dcm4che,dc=org -f $DCM4CHEE_ARC/ldap/default-ui-permissions.ldif 

or if updating on Docker by

$ docker exec <ldap-container-id> init-ui-config
$ docker exec <ldap-container-id> init-ui-permissions

to avoid error message Permission not Found in the UI.

@shral shral added the enhancement New feature or request label Jan 31, 2018
@shral shral self-assigned this Jan 31, 2018
@vrindanayak vrindanayak added this to the 5.13.0 milestone Feb 22, 2018
shral added a commit that referenced this issue Feb 22, 2018
shral added a commit that referenced this issue Feb 23, 2018
shral added a commit that referenced this issue Feb 27, 2018
shral added a commit that referenced this issue Feb 28, 2018
shral added a commit that referenced this issue Feb 28, 2018
@shral
Copy link
Member Author

shral commented Mar 1, 2018

This is the default ldap/config that is needed (Using the user "admin" as main admin user, you can change that in config page of the UI)

version: 1

dn: dcmuiConfigName=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM
  Configuration,dc=dcm4che,dc=org
objectClass: dcmuiConfig
dcmuiConfigName: default

dn: dcmuiPermissionName=Menu - Studies,dcmuiConfigName=default,dicomDeviceNa
 me=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: menu-studies
dcmuiPermissionName: Menu - Studies
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Menu - Lifecycle Management,dcmuiConfigName=default,
 dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,d
 c=org
objectClass: dcmuiPermission
dcmuiAction: menu-lifecycle_management
dcmuiPermissionName: Menu - Lifecycle Management
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Menu - Audit Record Repository,dcmuiConfigName=defau
 lt,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4ch
 e,dc=org
objectClass: dcmuiPermission
dcmuiAction: menu-audit_record_repository
dcmuiPermissionName: Menu - Audit Record Repository
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Associations,dcmuiConfigName=defaul
 t,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che
 ,dc=org
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->associations
dcmuiPermissionName: Tab - Monitoring Associations
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Control,dcmuiConfigName=default,dic
 omDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=o
 rg
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->control
dcmuiPermissionName: Tab - Monitoring Control
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Export,dcmuiConfigName=default,dico
 mDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=or
 g
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->export
dcmuiPermissionName: Tab - Monitoring Export
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring External Retrieve,dcmuiConfigName=d
 efault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dc
 m4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->external_retrieve
dcmuiPermissionName: Tab - Monitoring External Retrieve
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Storage Commitments,dcmuiConfigName
 =default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=
 dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->storage_commitments
dcmuiPermissionName: Tab - Monitoring Storage Commitments
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Storage Systems,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->storage_systems
dcmuiPermissionName: Tab - Monitoring Storage Systems
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Configuration Devices,dcmuiConfigName=default,
 dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,d
 c=org
objectClass: dcmuiPermission
dcmuiAction: tab-configuration->devices
dcmuiPermissionName: Tab - Configuration Devices
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Configuration Ae List,dcmuiConfigName=default,
 dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,d
 c=org
objectClass: dcmuiPermission
dcmuiAction: tab-configuration->ae_list
dcmuiPermissionName: Tab - Configuration Ae List
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Configuration Hl7 Applications,dcmuiConfigName
 =default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=
 dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: tab-configuration->hl7_applications
dcmuiPermissionName: Tab - Configuration Hl7 Applications
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Tab - Monitoring Queues,dcmuiConfigName=default,dico
 mDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=or
 g
objectClass: dcmuiPermission
dcmuiAction: tab-monitoring->queues
dcmuiPermissionName: Tab - Monitoring Queues
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Device Configuration,dcmuiConfigName=defaul
 t,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che
 ,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-devicelist-device_configuration
dcmuiPermissionName: Action - Device Configuration
dcmAcceptedUserRole: admin
dcmuiActionParam: accessible

dn: dcmuiPermissionName=Menu - Configuration,dcmuiConfigName=default,dicomDe
 viceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: menu-configuration
dcmuiPermissionName: Menu - Configuration
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - More Function,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-more_function
dcmuiPermissionName: Action - Studies - More Function
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Open Viewer,dcmuiConfigName=defau
 lt,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4ch
 e,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-viewer
dcmuiPermissionName: Action - Studies - Open Viewer
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Edit study,dcmuiConfigName=defau
 lt,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4ch
 e,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-study
dcmuiPermissionName: Action - Studies - Edit study
dcmAcceptedUserRole: admin
dcmuiActionParam: edit

dn: dcmuiPermissionName=Action - Studies - Upload File in study,dcmuiConfig
 Name=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration
 ,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-study
dcmuiPermissionName: Action - Studies - Upload File in study
dcmAcceptedUserRole: admin
dcmuiActionParam: upload

dn: dcmuiPermissionName=Action - Studies - Verify Storage Commitment,dcmuiCo
 nfigName=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configura
 tion,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-verify_storage_commitment
dcmuiPermissionName: Action - Studies - Verify Storage Commitment
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Delete study,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-download
dcmuiPermissionName: Action - Studies - Delete study
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Restore Study,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-restore_study
dcmuiPermissionName: Action - Studies - Restore Study
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Copy Merge Move,dcmuiConfigName=d
 efault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dc
 m4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-copy_merge_move
dcmuiPermissionName: Action - Studies - Copy Merge Move
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Edit Patient,dcmuiConfigName=defa
 ult,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4c
 he,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-patient
dcmuiPermissionName: Action - Studies - Edit Patient
dcmAcceptedUserRole: admin
dcmuiActionParam: edit

dn: dcmuiPermissionName=Action - Studies - Create MWL,dcmuiConfigName=defaul
 t,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che
 ,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-mwl
dcmuiPermissionName: Action - Studies - Create MWL
dcmAcceptedUserRole: admin
dcmuiActionParam: create

dn: dcmuiPermissionName=Action - Studies - Delete Patient,dcmuiConfigName=de
 fault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm
 4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-patient
dcmuiPermissionName: Action - Studies - Delete Patient
dcmAcceptedUserRole: admin
dcmuiActionParam: delete

dn: dcmuiPermissionName=Action - Studies - Export study,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-study
dcmuiPermissionName: Action - Studies - Export study
dcmAcceptedUserRole: admin
dcmuiActionParam: export

dn: dcmuiPermissionName=Action - Studies - Reject study,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-study
dcmuiPermissionName: Action - Studies - Reject study
dcmAcceptedUserRole: admin
dcmuiActionParam: reject

dn: dcmuiPermissionName=Action - Studies - Restore study,dcmuiConfigName=de
 fault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm
 4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-study
dcmuiPermissionName: Action - Studies - Restore study
dcmAcceptedUserRole: admin
dcmuiActionParam: restore

dn: dcmuiPermissionName=Action - Studies - Show Series,dcmuiConfigName=defau
 lt,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4ch
 e,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-serie
dcmuiPermissionName: Action - Studies - Show Series
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Export Series,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-serie
dcmuiPermissionName: Action - Studies - Export Series
dcmAcceptedUserRole: admin
dcmuiActionParam: export

dn: dcmuiPermissionName=Action - Studies - Reject Series,dcmuiConfigName=def
 ault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4
 che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-serie
dcmuiPermissionName: Action - Studies - Reject Series
dcmAcceptedUserRole: admin
dcmuiActionParam: reject

dn: dcmuiPermissionName=Action - Studies - Restore Series,dcmuiConfigName=de
 fault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm
 4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-serie
dcmuiPermissionName: Action - Studies - Restore Series
dcmAcceptedUserRole: admin
dcmuiActionParam: restore

dn: dcmuiPermissionName=Action - Studies - Export Instance,dcmuiConfigName=d
 efault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dc
 m4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-instance
dcmuiPermissionName: Action - Studies - Export Instance
dcmAcceptedUserRole: admin
dcmuiActionParam: export

dn: dcmuiPermissionName=Action - Studies - Reject Instance,dcmuiConfigName=d
 efault,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dc
 m4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-serie
dcmuiPermissionName: Action - Studies - Reject Instance
dcmAcceptedUserRole: admin
dcmuiActionParam: reject

dn: dcmuiPermissionName=Action - Studies - Restore Instance,dcmuiConfigName=
 default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=d
 cm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-instance
dcmuiPermissionName: Action - Studies - Restore Instance
dcmAcceptedUserRole: admin
dcmuiActionParam: restore

dn: dcmuiPermissionName=Action - Studies - Edit MWL,dcmuiConfigName=default,
 dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,d
 c=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-mwl
dcmuiPermissionName: Action - Studies - Edit MWL
dcmAcceptedUserRole: admin
dcmuiActionParam: upload

dn: dcmuiPermissionName=Action - Studies - Delete MWL,dcmuiConfigName=defaul
 t,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che
 ,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-studies-mwl
dcmuiPermissionName: Action - Studies - Delete MWL
dcmAcceptedUserRole: admin
dcmuiActionParam: delete

dn: dcmuiPermissionName=Action - Monitoring Queues All Actions,dcmuiConfigNa
 me=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,d
 c=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->queues-all_action
dcmuiPermissionName: Action - Monitoring Queues All Actions
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Monitoring Queues Single Actions,dcmuiConfi
 gName=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuratio
 n,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->queues-single_action
dcmuiPermissionName: Action - Monitoring Queues Single Actions
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Monitoring Export All Actions,dcmuiConfigNa
 me=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,d
 c=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->export-all_action
dcmuiPermissionName: Action - Monitoring Export All Actions
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Monitoring Export Single Action,dcmuiConfig
 Name=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration
 ,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->export-single_action
dcmuiPermissionName: Action - Monitoring Export Single Action
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Monitoring - External Retrieve All Actions,
 dcmuiConfigName=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Co
 nfiguration,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->external_retrieve-all_action
dcmuiPermissionName: Action - Monitoring - External Retrieve All Actions
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Monitoring - External Retrieve Single Actio
 n,dcmuiConfigName=default,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM 
 Configuration,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-monitoring->external_retrieve-single_action
dcmuiPermissionName: Action - Monitoring - External Retrieve Single Action
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Device Config Actions,dcmuiConfigName=defau
 lt,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4ch
 e,dc=org
objectClass: dcmuiPermission
dcmuiAction: action-devicelist-device_configuration
dcmuiPermissionName: Action - Device Config Actions
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Count,dcmuiConfigName=default,dic
 omDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=o
 rg
objectClass: dcmuiPermission
dcmuiAction: action-studies-count
dcmuiPermissionName: Action - Studies - Count
dcmAcceptedUserRole: admin
dcmuiActionParam: visible

dn: dcmuiPermissionName=Action - Studies - Size,dcmuiConfigName=default,dico
 mDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=or
 g
objectClass: dcmuiPermission
dcmuiAction: action-studies-size
dcmuiPermissionName: Action - Studies - Size
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

dn: dcmuiPermissionName=Menu - Monitoring,dcmuiConfigName=default,dicomDevic
 eName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
objectClass: dcmuiPermission
dcmuiAction: menu-monitoring
dcmuiPermissionName: Menu - Monitoring
dcmAcceptedUserRole: admin
dcmAcceptedUserRole: user
dcmuiActionParam: visible

@shral shral closed this as completed Mar 1, 2018
shral added a commit that referenced this issue Mar 1, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 2, 2018
shral added a commit that referenced this issue Mar 22, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants