Managing authentication rules

On the administration dashboard of OptimaWSI, you can view and define the authentication rules of Optima.

  1. On the Security menu, click Privileges.

    A grid shows all access permissions available.

    The Privileges groups panel lists the permission groups. You can sort and filter them.

    The lower panel is the form you can use to edit the permissions selected from the list and to create new permissions.

  1. On the Privileges groups panel, click the Add button.

    In the New rule panel, you can create a new permission.

  2. Fill in the following fields:

    Field Description
    Code Unique textual code identifier for the group (mandatory).
    Description Description of the group (optional).
    Object Indicates on which object the set of permissions is to be evaluated (mandatory).

    Depending on the selected object, the fields Action and Conditions are populated automatically. An action identifies the type of activity that can be protected with authentication.

  3. You can save the group without any associated condition.

    Tip:  A group defined in this manner always allows for the specified action.

  4. Optionally, you can add a condition to the group by dragging it from the Data Grid table of the Objects panel.
  5. You can remove a condition by dragging it from the editing form to the recycling symbol.
  6. Click Save.

The following table shows the complete list of objects and associated actions.

Object Actions

Traffic
Supervisor

Traffic Supervisor.

Action Code

Description

login

TS-Login

All basic interactions that are front-end related, including websocket communications.

Dashboard

Administation dashboard.

login

Datex2

Represents the DATEX II Interface.

Action Code

Description

getPublication: Access the DATEX II feed that contains active system events.

get Datex II Publication internal requests

No login required for requests from the local host.

get Datex II Publication external requests

Login required for requests from the external host

setPublication: Receive an event feed in DATEX II format.

 

set Datex II Publication internal requests

No login required for requests from the local host.

set Datex II Publication external requests

Login required for requests from the external host.

Configuration

 

DATEX2 administration internal requests

No login required for requests from the local host.

DATEX2 administration external requests

Login required for requests from the external host.

OptimaTDE: Permission inside SISTeMA.

OPTIMA

Internal Web services.

TS-Create: Create an event through the Traffic Supervisor user interface.

TS-Datex2-Create

N.A.

TS-Delete: Delete an event from the DB (a finished event is not deleted from the DB).

TS-Datex2-Delete

This group is to delete an event/scenario and other front-end-related services.

TS-Read: Display the attributes of an event through the Traffic Supervisor UI.

 TS-Datex2-Read N.A.

TS-Update: Update the attributes of an event through the Traffic Supervisor UI (the termination of an event coincides with this permission).

TS-Datex2-Update

N.A.

Datex1_2

Action Code

Description

TS-Crud

TS Datex new event create

N.A.
LayerTS

Represents the layers exposed to the Traffic Supervisor interface and accessible separately via WFS and WMS requests.

Action Code

Description

GetCapabilities: Access the tabular representation of the elements of a layer.

AggiungiLayer

Allows for the addition of aTS layer.

GeoLayer-Insert: Add an element to a layer.

 

 

 

Creazione Path

Layer element values:

  • webcam
  • path_resu
  • path_resu_link
  • filters
  • filter_conditions

N.A.

Controller Insert

Layer element values:

  • controller_command

N.A.

Scenario Insert

Layer element values:

  • simu
  • simg
  • sims

N.A.

GeoLayer-Update: Update the attributes of a layer element.

Aggiornamento Path

Layer element values:

  • path_resu
  • path_resu_link
  • filters
  • filter_conditions

N.A.

Count Locations Update

Layer element values:

  • cloc

N.A.

Scenario Update

Layer element values:

  • simg
  • scen

N.A.

GeoLayer-Delete: Delete the attributes of a layer element.

Eliminazione Path

Layer element values:

  • path_resu
  • path_resu_link
  • filters
  • filter_conditions

N.A.

GeoLayer-Read: Read the elements of a layer.

Example: events map visualization.

 

TS-Read-AllLayers Path

Layer element values:

All logged users have read access to ANY layer.

Read-Hyperpath-layers

Layer element values:

  • events
  • parking
  • strt
  • trasffic_lasthour_hier
  • tstp

Non-logged users have access to the selected layers from the hyperpath workspace.

Geoserver

GeoServer module.

Action Code

Description

Geoserver-admin: Access the administration panel of GeoServer

Geoserver admin

N.D.

OptimaControl

Action Code

Description

OptimaControl-Admin: Access the administration panel of GeoServer

Optima Control administration

N.D.

RouteMatcher

Action Code

Description

RouteMatcher-request

routeMatcher internal requests

Values:

127.0.0.1/32

No login required for requests from the local host.

routeMatcher external requests

Login required for requests from the external host.
OptimaADI
Action Code

Description

OptimaADI-request

Optima ADI internal request

Values:

127.0.0.1/32

No login required for requests from the local host.

OptimaADI-request

Optima ADI internal request

Login required for requests from the external host.
OptimaKPI
Action Code

Description

OptimaKPI-Create

OptimaKPI-Create

Web service for the KPI create operation.

OptimaKPI-Read

OptimaKPI-Read

Web service for the KPI read operation.

OptimaKPI-Update

OptimaKPI-Update

Web service for the KPI update or for a logical delete operation.
OptimaMicro
Action Code

Description

OptimaMicro-request

OptimaMicro-simulation-request

Web service for Optima Micro request operations.
OptimaControl2
Action Code

Description

OptimaControl2-Admin

OptimaControl-2-request

Web service for Optima Control request operations.
TRE
Action Code

Description

TRE-Status

N.A.

N.A.

TRE-StopService

N.A.

N.A.

TRE-Set

N.A.

N.A.

TRE-EqFunc

N.A.

N.A.

TRE_Simulation-Start/Stop

N.A.

N.A.