VISULOX 5 Documentation
5.0.2 5.0.1
5.0.2 5.0.1

Restrict default Visulox Cockpit

Overview

The default Visulox Cockpit without a role has no resitriction.
To build a restricted view, a role for the Visulox Cockpit must be defined.


A role can have a filter for users / usergroups, applications and information for the input lines.

In a process driven environment it is expected, that the Cockpit can only be used in a Dual Control cooperation or by a special group.

Because the Visulox Portal admin can assign a Cockpit without a role, it is not fulfilled, that this view is restricted.

Another fact is, that the event stream may contain, based on policies, the keyboard input lines a user entered in the application. Per default, these events are hidden and can be presented in the Cockpit by setting the option -ksr. If the companies process policy requests, that the keyboard input lines should only be seen by a special group of persons, the Visulox Portal admin has to define a Cockpit with -ksr and assign the group. This implies, that he can assign this application to himself.

This article describes, how to setup a default Cockpit with view restrictions.

View restrictions of a Cockpit without a role

On the command line, two case sensitive glob filters can be defined:

vlxgui.default.view_filter_application
vlxgui.default.view_filter_user_group

To restrict the Cockpit in its default behavior, set:

visulox config edit -name vlxgui.default.view_filter_user_group=<user/group glob>
visulox config edit -name vlxgui.default.view_filter_application=<application glob>

Example:

This defines a Cockpit without a role, presenting only logged in users. No information about the applications they are running.
visulox config edit -name vlxgui.default.view_filter_application="WORKSPACE"

Keyboard input line restriction without a role

This defines a Cockpit without a role, presenting only logged in users. No information about the applications they are running.
visulox config edit -name vlxgui.ksrgroup=<user/group glob>

If the user belongs to <user/group glob>, he will see the keyboard input lines.

Restriction within a role

For restrictions within a role and a configuration example have a look at: How to configure role profiles for the VISULOX Cockpit