Restrict default VISULOX Cockpit

Overview

The default VISULOX Cockpit without a role has no resitriction.
To build a restricted view, a role for the VISULOX Cockpit must be defined.

A role can have a filter for users / usergroups, applications and information for the input lines.

In a process driven environment it is expected, that the Cockpit can only be used in a Dual Control cooperation or by a special group.

Because the VISULOX PORTAL admin can assign a Cockpit without a role, it is not fulfilled, that this view is restricted.

Another fact is, that the eventstream may contain, based on policies, the keyboard input lines a user entered in the application. Per default, these events are hidden and can be presented in the Cockpit by setting the option -ksr. If the companies process policy requests, that the keyboard input lines should only be seen by a special group of persons, the VISULOX PORTAL admin has to define a Cockpit with -ksr and assign the group. This implies, that he can assign this application to himself.

This article describes, how to setup a default Cockpit with view restrictions.

View restrictions of a Cockpit without a role

On the command line, two casesensitive glob filters can be defined:

CODE

vlxgui.default.view_filter_application
vlxgui.default.view_filter_user_group

To restrict the Cockpit in its default behaviour, set:

CODE

visulox config edit -name vlxgui.default.view_filter_user_group=<user/group glob>
visulox config edit -name vlxgui.default.view_filter_application=<application glob>

Example:

This defines a Cockpit without a role, presenting only logged in users. No infomation about the applications they are running.

CODE

visulox config edit -name vlxgui.default.view_filter_application="WORKSPACE"

Keyboard input line restriction without a role

This defines a Cockpit without a role, presenting only logged in users. No information about the applications they are running.

CODE

visulox config edit -name vlxgui.ksrgroup=<user/group glob>

If the user belongs to <user/group glob>, he will see the keyboard inputlines.

Restriction within a role

For restrictions within a role and a configuration example have a look at: How to configure role profiles for thr VISULOX Cockpit