Actions
Understanding Actions#
When granting permissions, you'll include a list of the allowed actions the user or user group can perform on the resource (or IRN).
There are a total of seven different actions you can grant across the various Twinit services.
| ACTION | Permissions granted by action |
|---|---|
| READ | Allows the user or user group to read a resources denoted by an IRN |
| CREATE | Allows the user or user group to create new resources denoted by an IRN |
| EDIT | Allows the user or user group to make changes to resources denoted by an IRN |
| DELETE | Allows the user or user group to delete resources denoted by an IRN |
| SHARE | Allows the user or user group to assign permissions to other users, so long as the user also has permission to the action. We will discuss this more below. |
| RUN | Allows the user or user group to run orchestrators in the Datasources Service. |
| ASSIGN | Allows the user or user group to assign permission profiles to orchestrators in the Datasources Service. We will discuss more in the next chapter on Permission Profiles. |
Keep in mind that an IRN can denote everything in a service or all types of a resource. So granting DELETE action to the IRN itemsvc : * : * allows the user to delete any and all of the resources managed by the item service.
You'll most likely be comfortable understanding READ, CREATE, EDIT, and DELETE actions as they mirror the standard database access permissions, or the standard GET, POST, PUT, and DELETE API request methods.
SHARE is a special action that allows users to assign permissions and actions to other users. In order for the user to assign permissions however, they must also have the permission they wish to assign to another user.
For example, User A has READ, CREATE, and SHARE actions for all Script NamedUserItems. User A can assign User B the READ and CREATE actions for all Script NamedUserItems as well. But User A cannot assign User B the DELETE action for all Script NamedUserItems.
If you are using the IafPermission platform api library a complete list of the Actions are available on IafPermission.PermConst.Action.