Permissions and Roles

Source file: permissions-and-roles.htm

BlastLogic enables multiple user roles to be created. Each role can be assigned with specific permissions. There are four types of permissions:

Global Only. Permission related to global operations and therefore only has an effect when granted in a global context. Assigning a role with this permission to a site-specific context will not grant access to these global operations.
Site Only. Permission only has effect on site-specific operations. Assigning a role with this permission to a site-specific context will grant access to these operations for that site only.
Context Specific. Permission relates to operations that can be both global and site-specific. Having the permission granted in a site-specific context grants access to the site-specific operations for that site only. It also grants access to the read-only global operations with this permission but not to the editing global operations. The permission needs to be granted in the global context to access the global editing operations. Limiting key functions to technical staff enables greater control of data entered and limits accidental editing by untrained users.
Universal. Permission relates to global operations but can be enabled by assigning the permission in any context. Assigning a role with this permission to a either a site-specific context or global context will grant access to the global operation.

The table below describes a number of permissions that can be assigned to the user-defined roles.

Code	Permission Type	Actions/related actions	Description	Recommended other permissions
CreateBlasts	Site Only	Create blasts	Allows you to create a new empty Blast.	ViewBlasts EditBlasts CreateHoles
CreateHoles	Site Only	Add holes to a blast	Allows you to add new holes to a Blast. This is a separate permission from CreateBlasts to allow users to add ad-hoc/redrill holes to a blast without granting them the ability to create new blasts.	ViewBlasts - to retrieve holes after creation EditHoleDesigns - to modify hole designs after creation
CreateSites	Global Only	Create a site	Allows you to create new sites in the database.
DeleteSites	Global Only	Delete a site	Allows you to permanently delete a site from the database.
EditAttachments	Site Only	Edit attachments Create attachment Create attachment link Create file source Delete attachment Delete attachment link Delete file Edit attachment information	Allows you to create attachments, upload files, create links between attachments and blasts or sheets.	ViewBlasts
EditBlasts	Site Only	Edit blast information	Allows you to edit properties of a blast.	ViewBlasts
EditBlastProducts	Site Only	Edit blast product catalogue Create blast product catalogue	Allows you to add/edit blast products in the site's blast product catalogue.
EditChargeRules	Site Only	Edit charge rules Create charge rules Get charge rule	Allows you to create new non-standard charge rules and rename them.
EditChargingEvents	Site Only	Enter individual charging event data Create charging events Get charging events Edit charging events	Allows you to enter data about individual charging events such as loading of an individual deck or primer.	ViewBlasts - optionally link to holes
EditDrillingEvents	Site Only	View/create/edit drilling events	Allows you to view and edit drilling events. Drilling events typically come from a drill navigation system via an automated process such as BLIS.	ViewBlasts - optionally link to holes
EditEntries	Site Only	Enter data for sheets Edit data in sheets	Allows you to enter data to existing entries on sheets. Note that EditSheets is required to be able to add new entries to a sheet.	ViewBlasts
EditHoleComments	Site Only	Add comments to holes Edit comments to holes Delete comments in holes	Allows you to add comments to holes. ViewBlasts is also required to get hole URIs to associate comments with.	ViewBlasts
EditHoleDesigns	Site Only	Edit the design of holes	Allows you to modify the design of a hole. Includes moving holes between blasts, changing the hole id, abandoning a hole, editing custom hole properties, editing drill design and charge design of a hole. ViewBlasts is also required to retrieve the holes to proceed with editing.	ViewBlasts
EditInventory	Site Only	Edit inventory	Allows you to create inventory groups, and to edit inventory comments. If permission is granted, then the inventory button will be visible in the tablet home screen.	ViewInventory ViewBlasts* - to link usage to a blast
EditMeasurements	Site Only	Edit spatial measurements Create spatial measurements	Allows you to create, update and delete spatial measurements.
EditPatterns	Site Only	Edit patterns Create patterns	Allows you to create and modify named patterns of holes.	ViewBlasts
EditProcessTolerances	Site Only	Edit site process tolerances	Allows you to modify site-wide process tolerances, contained within site settings.	EditSiteSettings
EditRoles	Global Only	Edit roles Create roles	Allows you to define new roles and edit the permissions for a role.
EditSheets	Site Only	Create/edit sheets and entries	Allows you to create and update dip, backfill, charge or survey sheets. Also allows access to create and update entries on these sheets.	ViewBlasts
EditSiteResources	Site Only	Edit site resource lists Create site resource lists	Allows you to modify the lists of people, crews, drill machines, loading trucks and colour maps.
EditSites	Site Only	Manage a particular site	Allows you to rename a site and activate/deactivate the site.
EditSiteSettings	Site Only	Edit site settings Create attachment type Edit attachment type Edit custom properties Edit interval label	Allows you to modify site-wide configuration settings.
EditStandardChargeRules	Site Only	Edit standard charge rules Create charge rules	Allows you to create standard charge rules or mark existing charge rules as standard charge rules or not.	EditChargeRules
EditTieUp	Site Only	Edit tie-up designs	Allows you to view and edit design and actual tie-ups.	ViewBlasts
EditUserRoles	Context Specific	Assign roles to users Create user roles Delete user roles	Allows you to assign or remove roles from a user for a particular context. Roles can only be assigned in contexts that the user has this permission.	ListUsers ListUserRoles
EditUsers	Universal	Manage users	Allows you to add new users to the database, as well as activate and deactivate existing users.	ListUsers
ListUserRoles	Context Specific	View roles assigned to users	Allows you to view the list of roles assigned to users on each site. If the permission is granted globally, then you can see all roles assigned to all users. If the permission is granted per-site, then you can only see roles assigned to users on those sites where you have this permission.	ListUsers
ListUsers	Universal	View the user list	Allows you to obtain a list of all users in the database. If granted either globally or on any site, then you can see all users.
ViewAttachments	Site Only	View attachments
ViewBlasts	Site Only	View blasts Get drilling/charging events Get hole history Get spatial measurements Find blasts Find charge rules Find drilling events Find holes Get sheet, sheet information Get blast Get charge rule Get drilling, charging events Get drilling, charging, surveying entries Get tie-up	Allows you to search for and retrieve information about blasts on this site.
ViewInventory	Site Only	View blast product inventory	Allows you to view inventory history and stock levels of blast products. If permission is granted, then the inventory button will be visible in the tablet home screen.	ViewBlasts* - to lookup related blast information for inventory usage