Authorization

Authorization in the Script server can be divided in the following sections, depending on your purposes:

• User/group identifiers
• Groups
  • Ldap Groups
• Server access
• Scripts access
• Admin users

Please refer to the corresponding section for the required information.

In general there are no access restrictions in the Script server by default (except admin users).

User/group identifiers

When configuring any access from the section below, you should specify users and groups.

User identifiers depend on your Authentication:

• LDAP: user name at login
• Google OAuth: email
• No Auth: token or IP (see details)

Group identifiers are group names, prefixed with @ sign, e.g. @devs.

Groups

Groups can be configured via groups property. Each group has an unique name and a list of users (or other groups).

Groups can be referenced by "@ + name" syntax (e.g. @devs).

@admin_users
There is an implicit group @admin_users, which is created based on admin_users configuration property.

However if an explicit @admin_users group is defined, then admin_users property doesn't affect it.

Ldap Groups

If LDAP auth is enabled, then user groups can be fetched from it. These groups will combined with groups

User groups loading is performed only on user login. To be continued...