User permissions on the WorldServer 11.3 user interface

Starting with WorldServer 11.1.1, administrators have a wider variety of permissions to choose from when creating user types. These permissions apply to the calls made to the REST API, as well as to the access users have to the new sections of the user interface (the Home page, the Projects page, and the slide-out navigation pane – all introduced in WorldServer 11.x).

The REST API is organized according to resources. In the following table, each resource has one or more corresponding endpoints. In the Available actions column, you can find information about the types of calls users can make on each endpoint, whereas, in the Required permissions and description column, you can find the exact permissions they need to have in order to perform those actions. You can assign permissions when creating or modifying user types (in Management > User Setup > User Types).

Resource Endpoint Available actions Required permissions and description
Attribute definitions /attributeDefinitions READ No permissions required.
Attribute values /attributeValues READ and WRITE:
  1. Project attributes
  2. Task attributes
  3. Other resource attributes
To allow users to perform these actions, select the following check boxes:
  1. Assignments Tab > Projects > "Change Attributes" button – this will allow the users to view and modify project attributes.
  2. Assignments Tab > Tasks > "Change Attributes" button – this will allow the users to view and modify task attributes.
  3. Rest API & New UI > Can read all attributes – this will allow users to view all the attributes of all the resources.
Clients /clients READ To allow the users of a certain type to see all the clients configured in the system, select the Rest API & New UI > Clients > Can read clients the user is not a member of check boxes. Otherwise, they will be able to see only the clients to which they belong.
Configuration properties /config READ No permissions required.
Cost models /costModels READ To allow the users of a certain type to see all the cost models configured in the system, select the Rest API & New UI > Cost Model > Can read all Cost Models check boxes. Otherwise, they will be able to see only the cost models available to them based on Access Control permissions (Management > Linguistic Tool Setup > Cost Model Setup > Cost Models > Access Control tab).
Customizations /customizations READ, WRITE, and DELETE To allow users to view, modify, and delete customizations, select the Can manage WS 11 customizations check box.
Files /files UPLOAD and DOWNLOAD UPLOAD – to allow the users of a certain type to upload files, select at least one of the following sequences of check boxes:
  • Assignments Tab > Tasks > "Create New Project" button
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Import" button

DOWNLOAD – this means that users will have access to any file related to the resources to which they have access. To allow users to download files, select the REST API & New UI > Files > Can download files check boxes.

System information /info READ To allow the users of a certain type to see system information, select the Rest API & New UI > System Information > Can read System Information check boxes.
Background jobs /jobs READ To allow the users of a certain type to see all the background jobs configured in the system, select the Assignments Tab > Background Jobs > Can view all background jobs check boxes. Otherwise, they will be able to see only the background jobs that they created.
Linguistic filters /linguisticFilters READ To allow the users of a certain type to see all the linguistic filters configured in the system, select the Rest API & New UI > Linguistic filters > Can read linguistic filters owned by other users check boxes. Otherwise, they will see only the linguistic filters that they own.
Locales /locales READ Users can see only the locales assigned to them.
Login /login READ No permissions required.
Logout /logout READ No permissions required.
Project attributes /projectAttributes READ The same as for attributes.
Project groups

/projectGroups

/projectGroups/{id}

/projectGroups/{id}/statistics

/projectGroups/search

READ To allow the users of a certain type to make calls to these endpoints, select any of the check boxes under Assignments Tab > Projects > View drop-down menu.

/projectGroups/{id}/scoping

READ To allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.

/projectGroups/{id}/scoping/download

DOWNLOAD To allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.
/projectGroups/create CREATE To allow the users of a certain type to create project groups, select at least one of the following sequences of check boxes:
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Create New Project" button
Project types /projectTypes and /projectTypes/{id} READ No permissions required.
Projects /projects READ and WRITE READ:

To allow the users of a certain type to see existing projects, select the appropriate check boxes under Assignments Tab > Projects > View drop-down menu.

WRITE:
To allow the users of a certain type to create projects, select at least one of the following sequences of check boxes:
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Create New Project" button

/projects/{id}

/projects/{id}/details

/projects/{id}/statistics

/projects/statistics

READ To allow the users of a certain type to make calls to these endpoints, select the appropriate boxes under Assignments Tab > Projects > View drop-down menu.

/projects/{id}/scoping

/projects/{id}/scopedAssets

READ To allow the users of a certain type to make calls to these endpoints, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.

/projects/{id}/scoping/download

DOWNLOAD To allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.
/projects/export EXPORT To allow the users of a certain type to export projects, select the Assignments Tab > Projects > Tasks > "Export" button check boxes. Users can export only the projects they can see.
/projects/redo REDO To allow the users of a certain type to redo projects, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/projects/complete COMPLETE To allow the users of a certain type to complete projects, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/projects/cancel CANCEL To allow the users of a certain type to cancel projects, select the Assignments Tab > Projects > "Cancel" button check boxes.
/projects/createForTask MOVE TASKS To allow the users of a certain type to move tasks, select the Assignments Tab > Projects > Tasks > "Move Tasks" button check boxes.
Quality models /qualityModels READ To allow the users of a certain type to see all the quality models configured in the system, select the Rest API & New UI > Quality Model > Can read all Quality Models check boxes. Otherwise, they will not be able to see any quality models.
Quotes /rfqs READ To allow the users of a certain type to see all the quotes configured in the system, select the Rest API & New UI > Quotes > Can read quotes not created or requested by me check boxes. Otherwise, they will be able to see only the quotes they have requested or created.
Search filters /searchFilters READ No permissions required. Users can view only the search filters they have created.
/searchFilters/{id} READ Users can view only the search filters they have created.
Segments /segments and /segments/{tag} READ and WRITE Segments are associated to tasks. If the users of a certain type have the appropriate permissions on a task, they can also modify the segments in a task.
Tasks /tasks and /tasks/{id} READ and WRITE READ:

To allow the users of a certain type to see existing projects, select the appropriate check boxes under Assignments Tab > Projects > Tasks > View drop-down menu.

WRITE:

To allow the users of a certain type to change task attributes, select the Assignments Tab > Projects > Tasks > "Change Attributes" button check boxes.

/tasks/claim CLAIM To allow the users of a certain type to claim tasks, select the Assignments Tab > Projects > Tasks > "Claim" button check boxes.
/tasks/unclaim UNCLAIM To allow the users of a certain type to unclaim tasks, select the Assignments Tab > Projects > Tasks > "Unclaim" button check boxes.
/tasks/includeCost READ To allow the users of a certain type to include costs in tasks, select the Assignments Tab > Projects > Tasks > "Include Cost" button check boxes.
/tasks/excludeCost READ To allow the users of a certain type to exclude costs from tasks, select the Assignments Tab > Projects > Tasks > "Exclude Cost" button check boxes.
/tasks/complete COMPLETE To allow the users of a certain type to complete tasks, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/tasks/cancel CANCEL To allow the users of a certain type to cancel tasks, select the Assignments Tab > Projects > Tasks > "Cancel Tasks" button check boxes.
/tasks/redo REDO To allow the users of a certain type to redo tasks, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/tasks/import IMPORT To allow the users of a certain type to import tasks, select the Assignments Tab > Projects > Tasks > "Import" button check boxes.
/tasks/export EXPORT To allow the users of a certain type to export tasks, select the Assignments Tab > Projects > Tasks > "Export" button check boxes.
/tasks/changeAssignees CHANGE ASSIGNEES To allow the users of a certain type to change assignees, select the Assignments Tab > Projects > Tasks > "Change Assignees" button check boxes.
/tasks/move MOVE To allow the users of a certain type to move tasks, select the Assignments Tab > Projects > Tasks > "Move Tasks" button check boxes.
Task history /taskHistory READ If you select any check boxes under Assignments Tab > Tasks > View drop-down menu, the users in that user type will see the history of the tasks corresponding to the selected check boxes.
Term database setup /tds and /tds/{id} READ To allow the users of a certain type to see all the term databases configured in the system, select the Management Tab > Linguistic Tool Setup > Term Database Setup check boxes. Otherwise, they will be able to see only the term databases available to them based on ACL permissions.
Translation management setup /tms and /tms/{id} READ To allow the users of a certain type to see all the translation memories configured in the system, select the Management Tab > Linguistic Tool Setup > Translation Memory Setup check boxes. Otherwise, they will be able to see only the term databases available to them based on ACL permissions.
/tms/search READ To allow the users of a certain type to make calls to this endpoint, select the appropriate check boxes under Tools Tab > Translation Memories > Can browse TM.
Users /users and /users/{id} READ To allow the users of a certain type to see all the users configured in the system, select the Rest API & New UI > Users > Can read all users check boxes. Otherwise, they will not be able to see other users apart from themselves.

/users/me/assignments

/users/me/statistics

/users/me/details

/users/me/permissions

/users/me/profilePreferences

READ No permissions required.
Workflows

/workflows

/workflows/{id}

/workflows/{id}/image

READ To allow users of a certain type to see all the workflows configured in the system, select Rest API & New UI > Workflow > Can read all Workflows . Otherwise, they can only see workflows containing the steps they are allowed to see (according to the check boxes selected under Assignments Tab > Projects > Tasks > View drop-down menu).
Workflow roles /workflowRoles and /workflowRoles/{id} READ To allow users of a certain type to see all the workflow roles configured in the system, select the Assignments Tab > Background Jobs > Can view all background jobs check boxes. Otherwise, they will be able to see only the workflow roles assigned to them.
The WorldServer 11.x user interface is also a REST API client and any changes to REST API permissions are reflected directly on the user interface. The permissions related to projects and tasks, however, are more granular. Depending on the permissions you assigned to a certain user type, the users in it may select the following views:
  • On the projects page:
    • projects assigned to me
    • projects for clients I manage
    • projects for clients I am a member of
    • active projects for my locales and workgroups
    • completed and canceled projects for my locales and workgroups
    • all active projects
    • all completed and canceled projects
    • active projects for my vendor
    • completed and canceled projects for my vendor
    • active projects for my locales, workgroups and vendor
  • On the tasks page:
    • active tasks
    • all tasks
    • tasks assigned to me
    • canceled tasks
    • tasks claimed by me
    • completed tasks
    • all tasks with changed assets
    • active tasks with changed assets
    • finished tasks with changed assets
    • tasks pending update
    • tasks on automatic steps
    • tasks on cancel steps
    • tasks on error steps
    • tasks on human steps
    • tasks on parallel review steps
    • tasks on sub-workflow steps
    • tasks with issues
    • overdue tasks
    • unassigned tasks
    • unclaimed tasks

Normally, users can only view projects or tasks corresponding to their locales. However, if they have rights on at least one of the following views, they will be able to view all the projects or tasks configured in the system, regardless of their locale: projects for clients I am a member of, projects for clients I manage, all active projects, all completed and canceled projects, all active projects, active projects for my vendor, completed and canceled projects for my vendor. For more information, see the "User Type Assignments Tab Permissions" topic.

By default, users cannot modify resources corresponding to locales that are not assigned to them. To allow them to modify such resources, you have to grant them the Can change tasks or project for all locales permission by selecting its corresponding check box.

Parent topic: User Type Permissions Overview