15.5. Associating an Action with a Role

To add an action to a role, use the command goldsh RoleAction Create:

goldsh RoleAction Create Role=<Role Name> Object=<Object Name> Name=<Action Name> [Instance=<Instance Name>] [ShowUsage:=True]

The Instance indicates which specific instances of the object the action(s) can be performed on. Instances are interpreted as the value of the solitary primary key for an object. Unless otherwise specified, the instance will default to a value of ANY.

Valid values for Instance include:

ANY         Any or all of the object instances
NONE        No object instances
SELF        Only objects identified with myself (like my own username)
ADMIN       Only object instances that I am an admin for
<specific>  A specific named instance
      
For example, the Role Action:
      

Role           Object         Name    Instance 
--------------------- --------------------- ----------- ------------- 
ChemistryAdmin Project        Modify  Chemistry
      

allows users having the ChemistryAdmin role to modify the Chemistry Project.
      

Example 15-5. Allow the Manager to change role responsibilities

$ goldsh RoleAction Create Role=Manager Object=RoleAction Name=ANY

Role    Object     Name Instance 
---------- --------------- ------ ------------ 
Manager RoleAction ANY  ANY      
Successfully created 1 RoleAction