Available Abilities
Global Role Abilities
Abilities that are available when creating/editing Global Roles.
Global Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Bypass all ability checks | Gives all the possible abilities to the user automatically | |
| Bypass all permissions checks | Gives read and write access to all the assets in the system |
Administration Area Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Access the Administration area | Controls who can navigate to the Administration Area. |
|
| Access Users, Groups and Roles | Access the Administration area | *Gives the ability to access the Security Area (Users, Groups and Roles). |
| Access Asset Factories | Access the Administration area | *Gives the ability to access Asset Factories. |
| Access Configuration Sets | Access the Administration area | *Gives the ability to access Configuration Sets. |
| Access Content Types | Access the Administration area | *Gives the ability to access Content Types. |
| Access Data Definitions | Access the Administration area | *Gives the ability to access Data Definitions. |
| Access Metadata Sets | Access the Administration area | *Gives the ability to access Metadata Sets. |
| Access Publish Sets | Access the Administration area | *Gives the ability to access Publish Sets. |
| Access Targets & Destinations | Access the Administration area | *Gives the ability to access Targets and Destinations. |
| Access Transports | Access the Administration area | *Gives the ability to access Transports. |
| Access Workflow Definitions | Access the Administration area | *Gives the ability to access Workflow Definitions. |
| View Information and Logs in Administration area | Access the Administration area | Gives the ability to view the Cascade Server/System Information and ability to download the logs |
| Force logout of users | Access the Administration area | Gives the ability to log out other users from the system |
| Run Transports and Destination diagnostic tests | Access the Administration area, Access to at least one of these: Transports, Destinations | Gives the ability to test transports and destinations |
| Publish readable Administration area assets | Access the Administration area, Access to at least one of these: Publish Sets, Targets & Destinations | Ability to publish Administration Area assets (Publish Sets, Targets and Destinations) that the user has read permissions to |
| Publish writable Administration area assets | Access the Administration area, Access to at least one of these: Publish Sets, Targets & Destinations | Ability to publish Administration Area assets (Publish Sets, Targets and Destinations) that the user has write permissions t |
* Having the ability to access a particular Administration Component does not circumvent access rights applied to assets of that Component type.
Security Area Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| View users that share groups with current user | Access Users, Groups and Roles | Ability to view the users of the same group as the current user |
| View all users | Access Users, Groups and Roles | Ability to view all the users |
| Create users | Access Users, Groups and Roles, either View all users or View users that share groups with current user | Ability to create new users |
| Delete users that share groups with current user | Access Users, Groups and Roles, either Edit all users or Edit users that share groups with current user |
Ability to delete the users of the same group as the current user and at the same time the current user must be able to edit the user |
| Delete all users | Access Users, Groups and Roles, either Edit all users or Edit users that share groups with current user | Ability to delete any users that the current user is able to edit |
| Edit all users | Access Users, Groups and Roles, either View all users or View users that share groups with current user | Ability to edit any users |
| Edit users that share groups with current user | Access Users, Groups and Roles, either View all users or View users that share groups with current user | Ability to edit users of the same group as the current user |
| View groups to which current user belongs | Access Users, Groups and Roles | Ability to view the current user's groups |
| View all groups | Access Users, Groups and Roles | Ability to view all the groups |
| Create groups | Access Users, Groups and Roles, either View all groups or View groups to which current user belongs | Ability to create new groups |
| Delete groups to which current user belongs | Access Users, Groups and Roles, either Edit all groups or Edit groups to which the current user belongs | Ability to delete the current user's groups that the current user can edit |
| Delete all groups | Access Users, Groups and Roles, either Edit all groups or Edit groups to which the current user belongs | Ability to delete any groups that the current user can edit |
| Edit all groups | Access Users, Groups and Roles, either View all groups or View groups to which current user belongs | Ability to edit any groups |
| Edit groups to which the current user belongs | Access Users, Groups and Roles, either View all groups or View groups to which current user belongs | Ability to edit the current user's groups |
| View roles | Access Users, Groups and Roles | *Ability to view all roles in the system. |
| Edit roles | Access Users, Groups and Roles | *Ability to edit any roles in the system. |
* Having the ability to access a particular Security Area Component does not circumvent access rights applied to assets of that Component type.
Home Area Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Bypass workflow | Ability to bypass workflow when creating, editing, copying and deleting assets |
|
| Assign to self and approve steps in a workflow | Ability to assign workflow steps to the current user and to be assigned to transition steps in a workflow |
|
| Delete workflows | Ability to delete workflow |
|
| Assign workflows to folders | When user has edit access to a folder, he can also assign workflows to that folder in the Workflows tab |
|
| Upload images from the wysiwyg image upload popup | Bypass workflow | When editing an XHTML block or a page with a WYSIWYG editor, ability to upload images through that editor |
| Multi-select copy | Bypass workflow | Ability to copy several assets at the same time |
| Multi-select publish | Publish either readable or writable Home area assets | Ability to publish several assets at the same time |
| Multi-select move | Bypass workflow | Ability to move several assets at the same time |
| Multi-select delete | Bypass workflow | Ability to delete several assets at the same time |
| Modify Page Configurations on pages | Ability to assign different blocks and stylesheets at the page level when editing a page |
|
| Modify the Content Type of pages | Ability to assign a different Content Type to a page when editing it |
|
| Toggle Accessibility, Spelling, Link Checks and HTML tidy checkboxes when editing | Without this ability, the checkboxes Accessibility, Spelling, Links and Tidy HTML will be disabled |
|
| Modify Data Definitions of Pages and Blocks | Ability to assign or update a Data Definition assignment in pages and Data Definition blocks |
|
| Move or Rename assets | Ability to move or rename assets through the "Move/Rename" tab. |
|
| Publish readable Home area assets | Ability to publish Home area assets that the user has read or write permissions to |
|
| Publish writable Home area assets | Ability to publish Home area assets that the user has write permissions to | |
| View the publish queue | Ability to view the publish queue |
|
| Reorder the publish queue | View the publish queue | Ability to reorder the publish jobs |
| Cancel publish jobs | View the publish queue | Ability to cancel the publish jobs |
| Edit access rights | Ability to change access rights to the assets that the user has write permissions to by assigning the groups and users that the user has abilities to view |
|
| View the Versions tab | Ability to view the previous versions of assets that the user has read permissions to |
|
| Activate or delete previous asset versions | Ability to activate or delete previous versions of assets that the user has write permissions to |
|
| View the Audits tab | Ability to view the audits of assets that the user has read permissions to |
|
| Break locks on assets | Ability to break a lock on assets so that the users who were editing the asset previously won't be able to submit their edits and the asset will become available for another user to edit it |
|
| View Asset Factories in New menu even if user does not belong to any of their applicable groups | Ability to see all the system's Asset Factories in the new menu |
|
| Choose Destinations to publish to even if user does not belong to any of their applicable groups | Publish either readable or writable Home area assets | Ability to choose any system's destination that are applicable for publishing |
| Be assigned to and use Workflow Definitions even if user does not belong to any of their applicable groups | Ability to start any system's workflows that are applicable for the asset |
Sites Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Access the Site Management Area | Ability to access the Site Management Area to create edit or delete sites |
|
| Access All Sites | Ability to access the Home area of all sites |
|
| Create Sites | Ability to create new sites |
Tools Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Site Structure & Import Wizard |
Bypass workflow | Ability to use the New Site Wizard |
| Integrate Folder | Bypass workflow | Ability to use the Integrate Folder tool |
| Zip Archive | Ability to upload a zip archive and automatically unzip it in Cascade Server |
|
| Optimize Database | Ability to use the Database Optimizer tool |
|
| Sync LDAP | Ability to trigger an LDAP synchronization |
|
| Bulk Change | Bypass workflow | Ability to use the Bulk Change tool |
| Modify Logging Configuration | Ability to choose different classes/packages that should be outputting logging information |
|
| Search and Indexing | Ability to access the Searching and Indexing tool |
|
| Modify Configuration Files | Ability to access Custom Authentication Configuration, Image Editor Configuration, Image Editor Licence, LDAP Configuration, Product License and Publish Trigger Configuration |
|
| Path Repair Tool | Ability to access the Path Repair Tool | |
| Recycle Bin Checker | Ability to access the Recycle Bin Consistency Checker Tool | |
| Edit system preferences | Ability to access and change General, Email and Content Preferences |
|
| View and Restore only assets the current user deleted | Ability to view and restore assets in the Recycle Bin that have been deleted by the current User | |
| View and Restore all assets in the Recycle Bin | Ability to view and restore assets in the Recycle Bin that have been deleted by the current User or any other User | |
| Permanently remove assets from the Recycle Bin | Ability to remove assets from the recycle bin which permanently removes them from the system |
Site Role Abilities
Abilities that are available when creating/editing Site Roles.
Global Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Bypass all permissions checks | Gives read and write access to all the assets in the system |
Administration Area Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Access the Administration area | Controls who can navigate to the Administration Area. |
|
| Access Asset Factories | Access the Administration area | *Gives the ability to access Asset Factories. |
| Access Configuration Sets | Access the Administration area | *Gives the ability to access Configuration Sets. |
| Access Connectors | Access the Administration area | *Gives the ability to access Connectors |
| Access Content Types | Access the Administration area | *Gives the ability to access Content Types. |
| Access Data Definitions | Access the Administration area | *Gives the ability to access Data Definitions. |
| Access Metadata Sets | Access the Administration area | *Gives the ability to access Metadata Sets. |
| Access Publish Sets | Access the Administration area | *Gives the ability to access Publish Sets. |
| Access Destinations | Access the Administration area | *Gives the ability to access Destinations. |
| Access Transports | Access the Administration area | *Gives the ability to access Transports. |
| Access Workflow Definitions | Access the Administration area | *Gives the ability to access Workflow Definitions. |
| Run Transports and Destination diagnostic tests | Access the Administration area, Access to at least one of these: Transports, Destinations | Gives the ability to test transports and destinations |
| Publish readable Administration area assets | Access the Administration area, Access to at least one of these: Publish Sets, Targets & Destinations | Ability to publish Administration Area assets (Publish Sets, Targets and Destinations) that the user has read permissions to |
| Publish writable Administration area assets | Access the Administration area, Access to at least one of these: Publish Sets, Targets & Destinations | Ability to publish Administration Area assets (Publish Sets, Targets and Destinations) that the user has write permissions t |
* Having the ability to access a particular Administration Component does not circumvent access rights applied to assets of that Component type.
Home Area Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Bypass workflow | Ability to bypass workflow when creating, editing, copying and deleting assets |
|
| Assign to self and approve steps in a workflow | Ability to assign workflow steps to the current user and to be assigned to transition steps in a workflow |
|
| Delete workflows | Ability to delete workflow |
|
| Assign workflows to folders | When user has edit access to a folder, he can also assign workflows to that folder in the Workflows tab |
|
| Upload images from the wysiwyg image upload popup | Bypass workflow | When editing an XHTML block or a page with a WYSIWYG editor, ability to upload images through that editor |
| Multi-select copy | Bypass workflow | Ability to copy several assets at the same time |
| Multi-select publish | Publish either readable or writable Home area assets | Ability to publish several assets at the same time |
| Multi-select move | Bypass workflow | Ability to move several assets at the same time |
| Multi-select delete | Bypass workflow | Ability to delete several assets at the same time |
| Modify Page Configurations on pages | Ability to assign different blocks and stylesheets at the page level when editing a page |
|
| Modify the Content Type of pages | Ability to assign a different Content Type to a page when editing it |
|
| Toggle Accessibility, Spelling, Link Checks and HTML tidy checkboxes when editing | Without this ability, the checkboxes Accessibility, Spelling, Links and Tidy HTML will be disabled |
|
| Modify Data Definitions of Pages and Blocks | Ability to assign or update a Data Definition assignment in pages and Data Definition blocks |
|
| Move or Rename assets | Ability to move or rename assets through the "Move/Rename" tab. |
|
| Publish readable Home area assets | Ability to publish Home area assets that the user has read or write permissions to |
|
| Publish writable Home area assets | Ability to publish Home area assets that the user has write permissions to | |
| View the publish queue | Ability to view the Publish Queue in a particular Site | |
| Reorder the publish queue | View the publish queue | Ability to reorder jobs in a Site's publish queue |
| Cancel publish jobs | View the publish queue | Ability to cancel jobs in a Site's publish queue |
| Edit access rights | Ability to change access rights to the assets that the user has write permissions to by assigning the groups and users that the user has abilities to view |
|
| View the Versions tab | Ability to view the previous versions of assets that the user has read permissions to |
|
| Activate or delete previous asset versions | Ability to activate or delete previous versions of assets that the user has write permissions to |
|
| View the Audits tab | Ability to view the audits of assets that the user has read permissions to |
|
| Break locks on assets | Ability to break a lock on assets so that the users who were editing the asset previously won't be able to submit their edits and the asset will become available for another user to edit it |
|
| View Asset Factories in New menu even if user does not belong to any of their applicable groups | Ability to see all the system's Asset Factories in the new menu |
|
| Choose Destinations to publish to even if user does not belong to any of their applicable groups | Publish either readable or writable Home area assets | Ability to choose any system's destination that are applicable for publishing |
| Be assigned to and use Workflow Definitions even if user does not belong to any of their applicable groups | Ability to start any system's workflows that are applicable for the asset |
Tools Abilities
| Ability name | Required Abilities | Description |
|---|---|---|
| Integrate Folder | Bypass workflow | Ability to use the Integrate Folder tool |
| Zip Archive | Ability to upload a zip archive and automatically unzip it in Cascade Server |
|
| Bulk Change | Bypass workflow | Ability to use the Bulk Change tool |
| View and Restore only assets the current user deleted | Ability to view and restore assets in the Recycle Bin that have been deleted by the current User | |
| View and Restore all assets in the Recycle Bin | Ability to view and restore assets in the Recycle Bin that have been deleted by the current User or any other User | |
| Permanently remove assets from the Recycle Bin | Ability to remove assets from the recycle bin which permanently removes them from the system |