Default roles

After installation the following default roles are created with the following parameters:

Permissions on functionality

Each role has a set of rights associated to it. Each of these rights represent the level of access to the appropriate function of Metadefender Core v4 Web Management Console.
A right can be set to one of three different states:

• None: users of this role have no right to access the given function of Metadefender Core v4 Web Management Console. The menu belonging to the function is not displayed for the users of this role.

• Read-only: users of this role have right to access the given function for observation purposes only. Users of this role can, however, not effectuate any modification or any change to the function.

• Full: users of this role have full access to the given function, including viewing any data belonging to it and modifying its configuration.

Permissions on API level

Each role has a set of rights pertaining to REST API access level, including following REST endpoints:

Processing result fetching:

• GET /hash/<md5, sha1, sha256> (Fetch processing result)

• GET /file/<data_id> (Fetch processing result)

• GET /file/batch/<batch_id> (Status of Batch)

• GET /stat/log/scan (Leveraged by Core management console)

• GET /stat/log/scan/export (Leveraged by Core management console)

Download processed file:

• GET /file/converted/<data_id> (Download Sanitized Files)

• GET /file/processed/<data_id> (Leveraged by Core management console)

A right can be set to one of three different states:

• None:

  • Users of this role have no right to access the given REST APIs (return "Access denied" error) and relevant functionalities on Metadefender Core v4 Web Management Console

  • Note: When "NONE" is selected for "Processing result fetching", "Processing history" menu item under Dashboard will automatically switch to "READ-ONLY" right, and "FULL" right will instead be disabled for selection ("FULL" right can be only enabled for selection back when this option is switched to "ANYONE")

• Self-only:

  • Users of this role only have right to access the given REST APIs and relevant functionalities on Metadefender Core v4 Web Management Console where the scan requests were submitted by themselves only

  • Users of this role have no right to access the given REST APIs (return "Access denied" error) where scan requests were submitted by anyone else

  • Note: When "SELF-ONLY" is selected for "Processing result fetching", "Processing history" menu item under Dashboard will automatically switch to "READ-ONLY" right, and "FULL" right will instead be disabled for selection ("FULL" right can be only enabled for selection back when this option is switched to "ANYONE")

• Anyone: Users of this role have full access to the given REST APIs and relevant functionalities on Metadefender Core v4 Web Management Console where the scan requests were submitted by anyone

Functions

Besides listing existing roles the Roles tab provides the following functions:

• Add new role

• Modify (and view) existing role

• Delete existing role